Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    4 vulnerabilities by Techno Project Japan Co.

    JVNDB-2015-000170

    Vulnerability from jvndb - Published: 2015-10-29 13:46 - Updated:2015-11-02 18:05
    Severity
    N/A (UNKNOWN) - -
    Summary
    Enisys Gw fails to restrict access permissions
    Details
    Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw fails to restrict access permissions.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000170.html",
  "dc:date": "2015-11-02T18:05+09:00",
  "dcterms:issued": "2015-10-29T13:46+09:00",
  "dcterms:modified": "2015-11-02T18:05+09:00",
  "description": "Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw fails to restrict access permissions.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000170.html",
  "sec:cpe": {
    "#text": "cpe:/a:techno_project_japan:enisys_gw",
    "@product": "ENISYS",
    "@vendor": "Techno Project Japan Co.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000170",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN68289108/index.html",
      "@id": "JVN#68289108",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5671",
      "@id": "CVE-2015-5671",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5671",
      "@id": "CVE-2015-5671",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "Enisys Gw fails to restrict access permissions"
}

    JVNDB-2015-000169

    Vulnerability from jvndb - Published: 2015-10-29 13:46 - Updated:2015-11-02 18:05
    Severity
    N/A (UNKNOWN) - -
    Summary
    Enisys Gw vulnerable to cross-site scripting
    Details
    Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a cross-site scripting vulnerability (CWE-79). Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000169.html",
  "dc:date": "2015-11-02T18:05+09:00",
  "dcterms:issued": "2015-10-29T13:46+09:00",
  "dcterms:modified": "2015-11-02T18:05+09:00",
  "description": "Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a cross-site scripting vulnerability (CWE-79).\r\n\r\nShoji Baba reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000169.html",
  "sec:cpe": {
    "#text": "cpe:/a:techno_project_japan:enisys_gw",
    "@product": "ENISYS",
    "@vendor": "Techno Project Japan Co.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000169",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN13874649/index.html",
      "@id": "JVN#13874649",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5670",
      "@id": "CVE-2015-5670",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5670",
      "@id": "CVE-2015-5670",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "Enisys Gw vulnerable to cross-site scripting"
}

    JVNDB-2015-000168

    Vulnerability from jvndb - Published: 2015-10-29 13:37 - Updated:2015-11-02 18:05
    Severity
    N/A (UNKNOWN) - -
    Summary
    Enisys Gw vulnerable to arbitrary file creation
    Details
    Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a vulnerability that may allow a remote attacker to create arbitrary files. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000168.html",
  "dc:date": "2015-11-02T18:05+09:00",
  "dcterms:issued": "2015-10-29T13:37+09:00",
  "dcterms:modified": "2015-11-02T18:05+09:00",
  "description": "Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a vulnerability that may allow a remote attacker to create arbitrary files.\r\n\r\nShoji Baba reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000168.html",
  "sec:cpe": {
    "#text": "cpe:/a:techno_project_japan:enisys_gw",
    "@product": "ENISYS",
    "@vendor": "Techno Project Japan Co.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.5",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000168",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN33179297/index.html",
      "@id": "JVN#33179297",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5669",
      "@id": "CVE-2015-5669",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5669",
      "@id": "CVE-2015-5669",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Enisys Gw vulnerable to arbitrary file creation"
}

    JVNDB-2015-000167

    Vulnerability from jvndb - Published: 2015-10-29 13:37 - Updated:2015-11-02 18:05
    Severity
    N/A (UNKNOWN) - -
    Summary
    Enisys Gw vulnerable to SQL injection
    Details
    Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains an SQL injection vulnerability (CWE-89). Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000167.html",
  "dc:date": "2015-11-02T18:05+09:00",
  "dcterms:issued": "2015-10-29T13:37+09:00",
  "dcterms:modified": "2015-11-02T18:05+09:00",
  "description": "Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains an SQL injection vulnerability (CWE-89).\r\n\r\nShoji Baba reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000167.html",
  "sec:cpe": {
    "#text": "cpe:/a:techno_project_japan:enisys_gw",
    "@product": "ENISYS",
    "@vendor": "Techno Project Japan Co.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "7.5",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000167",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN58615092/index.html",
      "@id": "JVN#58615092",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5668",
      "@id": "CVE-2015-5668",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5668",
      "@id": "CVE-2015-5668",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-89",
      "@title": "SQL Injection(CWE-89)"
    }
  ],
  "title": "Enisys Gw vulnerable to SQL injection"
}