Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Joruri Clear all filters
TI-2019-04257 CVE-2019-5967 · GHSA-xvr4-69m8-v6mv

Cross-site scripting in SiteBridge Inc. Joruri CMS 2017

Priority LOW 29

Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0104 Published 2019-07-05 No fix listed CWE-79
TI-2019-04256 CVE-2019-5966 · GHSA-8gp8-q73h-h557

Authorization bypass in SiteBridge Inc. Joruri Mail

Priority LOW 26

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.01042 Published 2019-07-05 No fix listed CWE-639
TI-2019-04255 CVE-2019-5965 · GHSA-rjmj-2r6q-9wpp

Open redirect in SiteBridge Inc. Joruri Mail

Priority LOW 30

Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01133 Published 2019-07-05 No fix listed CWE-601