Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-46861 2024-10-4 15:41 2024-08-9 Show GitHub Exploit DB Packet Storm
2 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44973 2024-10-4 15:39 2024-07-30 Show GitHub Exploit DB Packet Storm
3 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44968 2024-10-4 15:36 2024-07-31 Show GitHub Exploit DB Packet Storm
4 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44970 2024-10-4 15:21 2024-06-5 Show GitHub Exploit DB Packet Storm
5 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足
CVE-2024-46864 2024-10-4 15:12 2024-09-5 Show GitHub Exploit DB Packet Storm
6 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2024-44969 2024-10-4 15:12 2024-07-1 Show GitHub Exploit DB Packet Storm
7 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 New CWE-129
配列インデックスの不適切な検証
CVE-2024-46859 2024-10-4 15:09 2024-09-9 Show GitHub Exploit DB Packet Storm
8 7.2 重要
Network
Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS における OS コマンドインジェクションの脆弱性 New CWE-78
CWE-78
CVE-2024-8686 2024-10-4 15:07 2024-09-11 Show GitHub Exploit DB Packet Storm
9 9.8 緊急
Network
tduckcloud tduckpro tduckcloud の tduckpro におけるパスワード管理機能に関する脆弱性 New CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2024-8692 2024-10-4 15:07 2024-09-11 Show GitHub Exploit DB Packet Storm
10 7.5 重要
Network
Hughes Network Systems wl300 fusion software Hughes Network Systems の wl300 fusion software における脆弱性 New CWE-311
CWE-noinfo
CVE-2024-42495 2024-10-4 15:05 2024-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 6, 2024, 8:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innate Images LLC VR Calendar allows PHP Local File Inclusion.This issue affects VR Calendar: from n/a … New CWE-22
Path Traversal
CVE-2024-44013 2024-10-5 20:15 2024-10-5 Show GitHub Exploit DB Packet Storm
72 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpdev33 WP Newsletter Subscription allows PHP Local File Inclusion.This issue affects WP Newsletter Sub… New CWE-22
Path Traversal
CVE-2024-44012 2024-10-5 20:15 2024-10-5 Show GitHub Exploit DB Packet Storm
73 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Ticket Ultra WP Ticket Ultra Help Desk & Support Plugin allows PHP Local File Inclusion.This issue a… New CWE-22
Path Traversal
CVE-2024-44011 2024-10-5 20:15 2024-10-5 Show GitHub Exploit DB Packet Storm
74 6.1 MEDIUM
Network
- - The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, a… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-9417 2024-10-5 19:15 2024-10-5 Show GitHub Exploit DB Packet Storm
75 - - - A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This vulnerability affects the function formAdvanceSetup of the file /goform/formAdvanceSetup. The manipulat… New CWE-120
Classic Buffer Overflow
CVE-2024-9532 2024-10-5 17:15 2024-10-5 Show GitHub Exploit DB Packet Storm
76 6.4 MEDIUM
Network
- - The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions … New - CVE-2024-8486 2024-10-5 17:15 2024-10-5 Show GitHub Exploit DB Packet Storm
77 6.8 MEDIUM
Network
- - The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8743 2024-10-5 16:15 2024-10-5 Show GitHub Exploit DB Packet Storm
78 4.9 MEDIUM
Network
- - The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form label fields in all versions up to… New CWE-79
Cross-site Scripting
CVE-2024-9528 2024-10-5 12:15 2024-10-5 Show GitHub Exploit DB Packet Storm
79 6.5 MEDIUM
Network
online_voting_system_project online_voting_system Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vulnerability allows an attacker to craft a malicious link that, when clicked by a… Update CWE-352
 Origin Validation Error
CVE-2024-45987 2024-10-5 11:21 2024-09-27 Show GitHub Exploit DB Packet Storm
80 4.3 MEDIUM
Adjacent
gotenna atak_plugin The goTenna Pro ATAK Plugin has a payload length vulnerability that makes it possible to tell the length of the payload regardless of the encryption used. Update CWE-203
 Information Exposure Through Discrepancy
CVE-2024-41715 2024-10-5 11:16 2024-09-27 Show GitHub Exploit DB Packet Storm