Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-46861 2024-10-4 15:41 2024-08-9 Show GitHub Exploit DB Packet Storm
2 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44973 2024-10-4 15:39 2024-07-30 Show GitHub Exploit DB Packet Storm
3 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44968 2024-10-4 15:36 2024-07-31 Show GitHub Exploit DB Packet Storm
4 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44970 2024-10-4 15:21 2024-06-5 Show GitHub Exploit DB Packet Storm
5 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-46864 2024-10-4 15:12 2024-09-5 Show GitHub Exploit DB Packet Storm
6 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2024-44969 2024-10-4 15:12 2024-07-1 Show GitHub Exploit DB Packet Storm
7 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 New CWE-129
配列インデックスの不適切な検証
CVE-2024-46859 2024-10-4 15:09 2024-09-9 Show GitHub Exploit DB Packet Storm
8 7.2 重要
Network
Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS における OS コマンドインジェクションの脆弱性 New CWE-78
CWE-78
CVE-2024-8686 2024-10-4 15:07 2024-09-11 Show GitHub Exploit DB Packet Storm
9 9.8 緊急
Network
tduckcloud tduckpro tduckcloud の tduckpro におけるパスワード管理機能に関する脆弱性 New CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2024-8692 2024-10-4 15:07 2024-09-11 Show GitHub Exploit DB Packet Storm
10 7.5 重要
Network
Hughes Network Systems wl300 fusion software Hughes Network Systems の wl300 fusion software における脆弱性 New CWE-311
CWE-noinfo
CVE-2024-42495 2024-10-4 15:05 2024-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 6, 2024, 8:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Reflected XSS.Thi… New CWE-79
Cross-site Scripting
CVE-2024-47638 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
52 - - - Cross-Site Request Forgery (CSRF) vulnerability in TinyPNG.This issue affects TinyPNG: from n/a through 3.4.3. New CWE-352
 Origin Validation Error
CVE-2024-47635 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
53 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho Forms allows Stored XSS.This issue affects Zoho Forms: from n/a through 4.0. New CWE-79
Cross-site Scripting
CVE-2024-47633 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
54 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Eleme… New CWE-79
Cross-site Scripting
CVE-2024-47632 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
55 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins LLC Logo Carousel – Clients logo carousel for WP allows Stored XSS.This issue aff… New CWE-79
Cross-site Scripting
CVE-2024-47631 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
56 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin allows PHP Local File Inclusion.This is… New CWE-22
Path Traversal
CVE-2024-47324 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
57 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin allows PHP Local File Inclusion.This is… New - CVE-2024-47323 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
58 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form – Contact Form Plugin allows Code Injection.This issue affects Bit Form – Contact Form Plugin: from n/a through 2.13… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-47319 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
59 - - - Authorization Bypass Through User-Controlled Key vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.9. New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-47316 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm
60 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Condless Cities Shipping Zones for WooCommerce allows PHP Local File Inclusion.This issue affects Citie… New CWE-22
Path Traversal
CVE-2024-47309 2024-10-5 22:15 2024-10-5 Show GitHub Exploit DB Packet Storm