Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
8 vulnerabilities found for revoworks_browser by jscom
CVE-2024-25091 (GCVE-0-2024-25091)
Vulnerability from nvd – Published: 2024-03-01 08:59 – Updated: 2024-08-05 18:52
VLAI
EPSS
VEX
Summary
Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks Browser prior to 2.2.95 (when using 'VirusChecker' or 'ThreatChecker' feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-05 18:45 UTC
CWE
- Protection Mechanism Failure
- CWE-693 - Protection Mechanism Failure
Assigner
References
2 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| J's Communications Co., Ltd. | RevoWorks SCVX |
Affected:
prior to scvimage4.10.21_1013
|
|
| J's Communications Co., Ltd. | RevoWorks Browser |
Affected:
prior to 2.2.95
|
|
| jscom | revoworks_scvx |
Affected:
0 , < 4.10.21_1013
(custom)
cpe:2.3:a:jscom:revoworks_scvx:*:*:*:*:*:*:*:* |
|
| jscom | revoworks_browser |
Affected:
0 , < 2.2.95
(custom)
cpe:2.3:a:jscom:revoworks_browser:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T23:36:21.620Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://jscom.jp/news-20240229/"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN35928117/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:jscom:revoworks_scvx:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "revoworks_scvx",
"vendor": "jscom",
"versions": [
{
"lessThan": "4.10.21_1013",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:jscom:revoworks_browser:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "revoworks_browser",
"vendor": "jscom",
"versions": [
{
"lessThan": "2.2.95",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-25091",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-05T18:45:40.566724Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693 Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-08-05T18:52:12.867Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks SCVX",
"vendor": "J\u0027s Communications Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "prior to scvimage4.10.21_1013"
}
]
},
{
"product": "RevoWorks Browser",
"vendor": "J\u0027s Communications Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "prior to 2.2.95"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using \u0027VirusChecker\u0027 or \u0027ThreatChecker\u0027 feature) and RevoWorks Browser prior to 2.2.95 (when using \u0027VirusChecker\u0027 or \u0027ThreatChecker\u0027 feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Protection Mechanism Failure",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T08:59:12.827Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://jscom.jp/news-20240229/"
},
{
"url": "https://jvn.jp/en/jp/JVN35928117/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-25091",
"datePublished": "2024-03-01T08:59:12.827Z",
"dateReserved": "2024-02-05T04:43:52.396Z",
"dateUpdated": "2024-08-05T18:52:12.867Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-27176 (GCVE-0-2022-27176)
Vulnerability from nvd – Published: 2022-06-14 07:05 – Updated: 2024-08-03 05:25
VLAI
EPSS
VEX
Summary
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment.
Severity
No CVSS data available.
CWE
- Incomplete Filtering of Special Elements
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jscom.jp/news-20220527/ | x_refsource_MISC |
| https://jvn.jp/en/jp/JVN27256219/index.html | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks SCVX, RevoWorks Browser, and RevoWorks |
Affected:
RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option')
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T05:25:31.007Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jscom.jp/news-20220527/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN27256219/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks SCVX, RevoWorks Browser, and RevoWorks",
"vendor": "J\u2019s Communication Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Incomplete Filtering of Special Elements",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-14T07:05:36.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jscom.jp/news-20220527/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jvn.jp/en/jp/JVN27256219/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2022-27176",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RevoWorks SCVX, RevoWorks Browser, and RevoWorks",
"version": {
"version_data": [
{
"version_value": "RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027)"
}
]
}
}
]
},
"vendor_name": "J\u2019s Communication Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Incomplete Filtering of Special Elements"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jscom.jp/news-20220527/",
"refsource": "MISC",
"url": "https://jscom.jp/news-20220527/"
},
{
"name": "https://jvn.jp/en/jp/JVN27256219/index.html",
"refsource": "MISC",
"url": "https://jvn.jp/en/jp/JVN27256219/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2022-27176",
"datePublished": "2022-06-14T07:05:36.000Z",
"dateReserved": "2022-05-25T00:00:00.000Z",
"dateUpdated": "2024-08-03T05:25:31.007Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-20791 (GCVE-0-2021-20791)
Vulnerability from nvd – Published: 2021-09-17 01:40 – Updated: 2024-08-03 17:53
VLAI
EPSS
VEX
Summary
Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors.
Severity
No CVSS data available.
CWE
- Improper Access Control
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jscom.jp/news-20210910_2/ | x_refsource_MISC |
| https://jvn.jp/en/jp/JVN81658818/index.html | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks Browser |
Affected:
2.1.230 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:53:22.425Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks Browser",
"vendor": "J\u2019s Communication Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "2.1.230 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper Access Control",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-17T01:40:24.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2021-20791",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RevoWorks Browser",
"version": {
"version_data": [
{
"version_value": "2.1.230 and earlier"
}
]
}
}
]
},
"vendor_name": "J\u2019s Communication Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Access Control"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jscom.jp/news-20210910_2/",
"refsource": "MISC",
"url": "https://jscom.jp/news-20210910_2/"
},
{
"name": "https://jvn.jp/en/jp/JVN81658818/index.html",
"refsource": "MISC",
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2021-20791",
"datePublished": "2021-09-17T01:40:25.000Z",
"dateReserved": "2020-12-17T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:53:22.425Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-20790 (GCVE-0-2021-20790)
Vulnerability from nvd – Published: 2021-09-17 01:40 – Updated: 2024-08-03 17:53
VLAI
EPSS
VEX
Summary
Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors.
Severity
No CVSS data available.
CWE
- Process Control
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jscom.jp/news-20210910_2/ | x_refsource_MISC |
| https://jvn.jp/en/jp/JVN81658818/index.html | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks Browser |
Affected:
2.1.230 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:53:22.375Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks Browser",
"vendor": "J\u2019s Communication Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "2.1.230 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Process Control",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-17T01:40:23.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2021-20790",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RevoWorks Browser",
"version": {
"version_data": [
{
"version_value": "2.1.230 and earlier"
}
]
}
}
]
},
"vendor_name": "J\u2019s Communication Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Process Control"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jscom.jp/news-20210910_2/",
"refsource": "MISC",
"url": "https://jscom.jp/news-20210910_2/"
},
{
"name": "https://jvn.jp/en/jp/JVN81658818/index.html",
"refsource": "MISC",
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2021-20790",
"datePublished": "2021-09-17T01:40:23.000Z",
"dateReserved": "2020-12-17T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:53:22.375Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-25091 (GCVE-0-2024-25091)
Vulnerability from cvelistv5 – Published: 2024-03-01 08:59 – Updated: 2024-08-05 18:52
VLAI
EPSS
VEX
Summary
Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks Browser prior to 2.2.95 (when using 'VirusChecker' or 'ThreatChecker' feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-05 18:45 UTC
CWE
- Protection Mechanism Failure
- CWE-693 - Protection Mechanism Failure
Assigner
References
2 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| J's Communications Co., Ltd. | RevoWorks SCVX |
Affected:
prior to scvimage4.10.21_1013
|
|
| J's Communications Co., Ltd. | RevoWorks Browser |
Affected:
prior to 2.2.95
|
|
| jscom | revoworks_scvx |
Affected:
0 , < 4.10.21_1013
(custom)
cpe:2.3:a:jscom:revoworks_scvx:*:*:*:*:*:*:*:* |
|
| jscom | revoworks_browser |
Affected:
0 , < 2.2.95
(custom)
cpe:2.3:a:jscom:revoworks_browser:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T23:36:21.620Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://jscom.jp/news-20240229/"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN35928117/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:jscom:revoworks_scvx:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "revoworks_scvx",
"vendor": "jscom",
"versions": [
{
"lessThan": "4.10.21_1013",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:jscom:revoworks_browser:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "revoworks_browser",
"vendor": "jscom",
"versions": [
{
"lessThan": "2.2.95",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-25091",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-05T18:45:40.566724Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693 Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-08-05T18:52:12.867Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks SCVX",
"vendor": "J\u0027s Communications Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "prior to scvimage4.10.21_1013"
}
]
},
{
"product": "RevoWorks Browser",
"vendor": "J\u0027s Communications Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "prior to 2.2.95"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using \u0027VirusChecker\u0027 or \u0027ThreatChecker\u0027 feature) and RevoWorks Browser prior to 2.2.95 (when using \u0027VirusChecker\u0027 or \u0027ThreatChecker\u0027 feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Protection Mechanism Failure",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T08:59:12.827Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://jscom.jp/news-20240229/"
},
{
"url": "https://jvn.jp/en/jp/JVN35928117/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-25091",
"datePublished": "2024-03-01T08:59:12.827Z",
"dateReserved": "2024-02-05T04:43:52.396Z",
"dateUpdated": "2024-08-05T18:52:12.867Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-27176 (GCVE-0-2022-27176)
Vulnerability from cvelistv5 – Published: 2022-06-14 07:05 – Updated: 2024-08-03 05:25
VLAI
EPSS
VEX
Summary
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment.
Severity
No CVSS data available.
CWE
- Incomplete Filtering of Special Elements
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jscom.jp/news-20220527/ | x_refsource_MISC |
| https://jvn.jp/en/jp/JVN27256219/index.html | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks SCVX, RevoWorks Browser, and RevoWorks |
Affected:
RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option')
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T05:25:31.007Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jscom.jp/news-20220527/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN27256219/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks SCVX, RevoWorks Browser, and RevoWorks",
"vendor": "J\u2019s Communication Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Incomplete Filtering of Special Elements",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-14T07:05:36.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jscom.jp/news-20220527/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jvn.jp/en/jp/JVN27256219/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2022-27176",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RevoWorks SCVX, RevoWorks Browser, and RevoWorks",
"version": {
"version_data": [
{
"version_value": "RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027)"
}
]
}
}
]
},
"vendor_name": "J\u2019s Communication Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using \u0027File Sanitization Library\u0027 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using \u0027File Sanitization Option\u0027), and RevoWorks Desktop 2.1.84 and prior versions (when using \u0027File Sanitization Option\u0027), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Incomplete Filtering of Special Elements"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jscom.jp/news-20220527/",
"refsource": "MISC",
"url": "https://jscom.jp/news-20220527/"
},
{
"name": "https://jvn.jp/en/jp/JVN27256219/index.html",
"refsource": "MISC",
"url": "https://jvn.jp/en/jp/JVN27256219/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2022-27176",
"datePublished": "2022-06-14T07:05:36.000Z",
"dateReserved": "2022-05-25T00:00:00.000Z",
"dateUpdated": "2024-08-03T05:25:31.007Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-20791 (GCVE-0-2021-20791)
Vulnerability from cvelistv5 – Published: 2021-09-17 01:40 – Updated: 2024-08-03 17:53
VLAI
EPSS
VEX
Summary
Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors.
Severity
No CVSS data available.
CWE
- Improper Access Control
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jscom.jp/news-20210910_2/ | x_refsource_MISC |
| https://jvn.jp/en/jp/JVN81658818/index.html | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks Browser |
Affected:
2.1.230 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:53:22.425Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks Browser",
"vendor": "J\u2019s Communication Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "2.1.230 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper Access Control",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-17T01:40:24.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2021-20791",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RevoWorks Browser",
"version": {
"version_data": [
{
"version_value": "2.1.230 and earlier"
}
]
}
}
]
},
"vendor_name": "J\u2019s Communication Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Access Control"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jscom.jp/news-20210910_2/",
"refsource": "MISC",
"url": "https://jscom.jp/news-20210910_2/"
},
{
"name": "https://jvn.jp/en/jp/JVN81658818/index.html",
"refsource": "MISC",
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2021-20791",
"datePublished": "2021-09-17T01:40:25.000Z",
"dateReserved": "2020-12-17T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:53:22.425Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-20790 (GCVE-0-2021-20790)
Vulnerability from cvelistv5 – Published: 2021-09-17 01:40 – Updated: 2024-08-03 17:53
VLAI
EPSS
VEX
Summary
Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors.
Severity
No CVSS data available.
CWE
- Process Control
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jscom.jp/news-20210910_2/ | x_refsource_MISC |
| https://jvn.jp/en/jp/JVN81658818/index.html | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks Browser |
Affected:
2.1.230 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:53:22.375Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "RevoWorks Browser",
"vendor": "J\u2019s Communication Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "2.1.230 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Process Control",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-17T01:40:23.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jscom.jp/news-20210910_2/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2021-20790",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "RevoWorks Browser",
"version": {
"version_data": [
{
"version_value": "2.1.230 and earlier"
}
]
}
}
]
},
"vendor_name": "J\u2019s Communication Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Process Control"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jscom.jp/news-20210910_2/",
"refsource": "MISC",
"url": "https://jscom.jp/news-20210910_2/"
},
{
"name": "https://jvn.jp/en/jp/JVN81658818/index.html",
"refsource": "MISC",
"url": "https://jvn.jp/en/jp/JVN81658818/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2021-20790",
"datePublished": "2021-09-17T01:40:23.000Z",
"dateReserved": "2020-12-17T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:53:22.375Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}