Mobile applications "GEO App" provided by GEO HOLDINGS CORPORATION contain multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/939.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/312.html' target='_blank'></a><ul><li>Improper Authorization in Handler for Custom URL Scheme (CWE-939) - CVE-2026-96614</li><li>Cleartext Storage of Sensitive Informatio…
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/601.html' target='_blank'></a><ul><li>Open redirect (CWE-601) - CVE-2026-72528</li></ul>Koki Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
The smartphone application "Vehicle Inspection Certificate Viewer" provided by the Ministry of Land, Infrastructure, Transport and Tourism includes an API integration feature for operators handling vehicle inspection certificates. The specifications for the API integration contain the following vulnerability:<a href='https://cwe.mitre.org/data/definitions/201.html' target='_blank'></a><ul><li>Insertion of Sensitive Information Into Sent Data (C…
Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java contain the vulnerabilities. The vulnerabilities exist in Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java which are components of other Hitachi products.
Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java contain the vulnerabilities. The vulnerabilities exist in Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java which are components of other Hitachi products.
Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java contain the vulnerability. This vulnerability exists in Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java which are components of other Hitachi products.
Multiple vulnerabilities have been found in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center. The product name in Hitachi Command Suite is changed in Hitachi Ops Center series on some products.
Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server contain the vulnerabilities.
Internal application information exposure vulnerability exists in Hitachi Ops Center Administrator.
EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin provided by EC-CUBE CO.,LTD. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/472.html' target='_blank'></a> <ul><li>External Control of Assumed-Immutable Web Parameter (CWE-472) - CVE-2026-103671</li></ul>The developer states that attacks exploiting the vulnerability has been observed. EC-CUBE CO.,LTD. reported this vulnerability to JPCERT/CC…