Most recent entries from all

EUVD-2026-190232

fkie_cve-2023-38574

Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

GHSA-px6p-g8xc-79wp

Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

gsd-2023-38574

jvndb-2023-000089

VI Web Client provided by i-PRO Co., Ltd. is Video Insight's video management software. VI Web Client contains multiple vulnerabilities listed below.<ul><li>Open Redirect (CWE-601) - CVE-2023-38574</li><li>Reflected Cross-site Scripting (CWE-79) - CVE-2023-39938</li><li>View Stored Cross-site Scripting in View setting page (CWE-79) - CVE-2023-40535</li><li>Stored Cross-site Scripting in Map setting page (CWE-79) - CVE-2023-40705</li></ul>Michael Heinzl reported these vulnerabilities to i-PRO Co., Ltd. and coordinated with them. After the coordination was completed, the developer reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.