Find a vulnerability

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000092.html",
  "dc:date": "2026-06-30T18:07+09:00",
  "dcterms:issued": "2026-06-30T18:07+09:00",
  "dcterms:modified": "2026-06-30T18:07+09:00",
  "description": "Web Image Monitor provided by Ricoh Company, Ltd. is a web server that is included in and runs on laser printers and MFPs (multifunction printers).\r\nWeb Image Monitor contains the vulnerability listed below.\u003ca href=\u0027https://cwe.mitre.org/data/definitions/79.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eReflected cross-site scripting (CWE-79) - CVE-2026-56809\u003c/li\u003e\u003c/ul\u003eTomasz Holeksa of Pentest Limited reported this vulnerability to Ricoh Company, Ltd. directly and coordinated. After the coordination, Ricoh Company, Ltd. reported this case to IPA under Information Security Early Warning Partnership, and JPCERT/CC coordinated with Ricoh Company, Ltd. for JVN publication.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000092.html",
  "sec:cpe": {
    "#text": "cpe:/a:ricoh:web_image_monitor",
    "@product": "Web Image Monitor",
    "@vendor": "Ricoh Co., Ltd",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.1",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000092",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN48718197/index.html",
      "@id": "JVN#48718197",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-56809",
      "@id": "CVE-2026-56809",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000066.html",
  "dc:date": "2026-04-30T17:02+09:00",
  "dcterms:issued": "2026-04-30T17:02+09:00",
  "dcterms:modified": "2026-04-30T17:02+09:00",
  "description": "Web Image Monitor provided by Ricoh Company, Ltd. is a web server that is included in and runs on laser printers and MFPs (multifunction printers).\r\nWeb Image Monitor contains the vulnerability listed below.\u003ca href=\u0027https://cwe.mitre.org/data/definitions/601.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eOpen redirect (CWE-601) - CVE-2026-41226\u003c/li\u003e\u003c/ul\u003eTony Kirkland of Sixgen Inc reported this vulnerability to Ricoh Company, Ltd. directly and coordinated. After the coordination, Ricoh Company, Ltd. reported this case to IPA under Information Security Early Warning Partnership, and JPCERT/CC coordinated with Ricoh Company, Ltd. for JVN publication.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000066.html",
  "sec:cpe": {
    "#text": "cpe:/a:ricoh:web_image_monitor",
    "@product": "Web Image Monitor",
    "@vendor": "Ricoh Co., Ltd",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.7",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000066",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN65118274/index.html",
      "@id": "JVN#65118274",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-41226",
      "@id": "CVE-2026-41226",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Open redirect vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000117.html",
  "dc:date": "2025-05-19T17:59+09:00",
  "dcterms:issued": "2024-10-31T16:44+09:00",
  "dcterms:modified": "2025-05-19T17:59+09:00",
  "description": "Web Image Monitor provided by Ricoh Company, Ltd. is an web server included and runs in laser printers and MFPs (multifunction printers).\r\nWeb Image Monitor contains a stack-based buffer overflow vulnerability (CWE-121) due to inappropriate parsing process of HTTP request.\r\n\r\nZhihong Tian, Hui Lu, Guocheng Wu, and Xingchi Chen of the Cyberspace Advanced Technology Institute of Guangzhou University reported this vulnerability to Ricoh Company, Ltd. directly and coordinated.\r\nAfter the coordination, Ricoh Company, Ltd. reported this case to IPA under Information Security Early Warning Partnership, and JPCERT/CC coordinated with Ricoh Company, Ltd. for JVN publication.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000117.html",
  "sec:cpe": {
    "#text": "cpe:/a:ricoh:web_image_monitor",
    "@product": "Web Image Monitor",
    "@vendor": "Ricoh Co., Ltd",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "7.7",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-000117",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN87770340/index.html",
      "@id": "JVN#87770340",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-47939",
      "@id": "CVE-2024-47939",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor"
}