Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 7, 2024, 10:02 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
91 9.8 緊急
Network
bbsetheme bbs-e-popup bbsetheme の WordPress 用 bbs-e-popup における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2023-36504 2024-10-4 13:50 2023-06-22 Show GitHub Exploit DB Packet Storm
92 8.8 重要
Adjacent
Ivanti Ivanti Endpoint Manager Ivanti の Ivanti Endpoint Manager における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-29826 2024-10-4 13:49 2024-05-31 Show GitHub Exploit DB Packet Storm
93 8.8 重要
Adjacent
Ivanti Ivanti Endpoint Manager Ivanti の Ivanti Endpoint Manager における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-29827 2024-10-4 13:49 2024-05-31 Show GitHub Exploit DB Packet Storm
94 9.8 緊急
Network
Motorola Solutions, Inc vigilant fixed lpr coms box ファームウェア Motorola Solutions, Inc の vigilant fixed lpr coms box ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2024-38281 2024-10-4 13:49 2024-06-13 Show GitHub Exploit DB Packet Storm
95 9.6 緊急
Network
VNote project VNote VNote project の VNote におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-41662 2024-10-4 13:49 2024-07-24 Show GitHub Exploit DB Packet Storm
96 7.5 重要
Network
lunary lunary lunary におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
CWE-863
CVE-2024-5130 2024-10-4 13:49 2024-06-6 Show GitHub Exploit DB Packet Storm
97 7.5 重要
Network
nationalkeep cybermath nationalkeep の cybermath における外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2024-7107 2024-10-4 13:49 2024-09-26 Show GitHub Exploit DB Packet Storm
98 9.8 緊急
Network
Telerik ui for wpf Telerik の ui for wpf におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2024-7575 2024-10-4 13:49 2024-09-25 Show GitHub Exploit DB Packet Storm
99 7.8 重要
Local
PaperCut Software International Pty PaperCut MF
PaperCut NG
PaperCut Software International Pty の PaperCut MF および PaperCut NG におけるリンク解釈に関する脆弱性 CWE-59
CWE-59
CVE-2024-8404 2024-10-4 13:49 2024-09-26 Show GitHub Exploit DB Packet Storm
100 7.8 重要
Local
シーメンス Simcenter Femap シーメンスの Simcenter Femap における境界外書き込みに関する脆弱性 CWE-119
CWE-787
CVE-2024-24921 2024-10-4 13:49 2024-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 5:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Atakan Au Automatically Hierarchic Categories in Menu allows Stored XSS.This issue affects… New CWE-79
Cross-site Scripting
CVE-2024-47365 2024-10-6 19:15 2024-10-6 Show GitHub Exploit DB Packet Storm
72 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Move addons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for… New CWE-79
Cross-site Scripting
CVE-2024-47364 2024-10-6 19:15 2024-10-6 Show GitHub Exploit DB Packet Storm
73 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Blockspare allows Stored XSS.This issue affects Blockspare: from n/a through 3.2.4. New - CVE-2024-47363 2024-10-6 19:15 2024-10-6 Show GitHub Exploit DB Packet Storm
74 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Reflected XSS.This issue affects BA Book Ever… New CWE-79
Cross-site Scripting
CVE-2024-47360 2024-10-6 19:15 2024-10-6 Show GitHub Exploit DB Packet Storm
75 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for El… New CWE-79
Cross-site Scripting
CVE-2024-47357 2024-10-6 19:15 2024-10-6 Show GitHub Exploit DB Packet Storm
76 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Catch Themes Create allows Stored XSS.This issue affects Create: from n/a through 2.9.1. New CWE-79
Cross-site Scripting
CVE-2024-47356 2024-10-6 19:15 2024-10-6 Show GitHub Exploit DB Packet Storm
77 - - - A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formLogDnsquery of the file /goform/formLogDnsquery. The manipulation of the ar… New CWE-120
Classic Buffer Overflow
CVE-2024-9550 2024-10-6 18:15 2024-10-6 Show GitHub Exploit DB Packet Storm
78 - - - Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor New CWE-200
Information Exposure
CVE-2024-45245 2024-10-6 17:15 2024-10-6 Show GitHub Exploit DB Packet Storm
79 - - - A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formEasySetupWizard/formEasySetupWizard2 of the file /goform/formEasySetupWizard.… New - CVE-2024-9549 2024-10-6 13:15 2024-10-6 Show GitHub Exploit DB Packet Storm
80 - - - A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the a… New CWE-89
SQL Injection
CVE-2024-9536 2024-10-6 01:15 2024-10-6 Show GitHub Exploit DB Packet Storm