Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
141 7.5 重要
Network 		Rockwell Automation 5015-u8ihft ファームウェア Rockwell Automation の 5015-u8ihft ファームウェアにおける脆弱性 CWE-20
CWE-noinfo
CVE-2024-45825 2024-10-3 10:02 2024-09-12 Show GitHub Exploit DB Packet Storm
142 8.8 重要
Network 		ferrislucas promptr ferrislucas の promptr におけるコードインジェクションの脆弱性 CWE-94
CWE-94
CVE-2024-46489 2024-10-3 10:01 2024-09-25 Show GitHub Exploit DB Packet Storm
143 6.5 警告
Network 		シスコシステムズ Cisco IOS
Cisco IOS XE 		シスコシステムズの Cisco IOS XE および Cisco IOS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-285
CWE-352
CVE-2024-20414 2024-10-3 10:01 2024-09-25 Show GitHub Exploit DB Packet Storm
144 5.5 警告
Local 		OpenText identity manager azuread driver OpenText の identity manager azuread driver におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
CWE-532
CVE-2021-22518 2024-10-3 09:58 2021-01-5 Show GitHub Exploit DB Packet Storm
145 5.3 警告
Adjacent 		Synology Inc. active backup for business agent Synology Inc. の active backup for business agent における重要なデータの暗号化の欠如に関する脆弱性 CWE-311
CWE-311
CVE-2023-52950 2024-10-3 09:58 2024-09-26 Show GitHub Exploit DB Packet Storm
146 5.4 警告
Network 		millbeck proroute h685t-w ファームウェア millbeckcommunications の proroute h685t-w ファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-38380 2024-10-3 09:58 2024-09-17 Show GitHub Exploit DB Packet Storm
147 5.5 警告
Local 		asg017 sqlite-vec asg017 の sqlite-vec における境界外書き込みに関する脆弱性 CWE-122
CWE-787
CVE-2024-46488 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
148 6.1 警告
Network 		ellevo ellevo ellevo におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-46655 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
149 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-47303 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
150 4.3 警告
Network 		ThemeHunk easy mega menu plugin ThemeHunk の WordPress 用 easy mega menu plugin における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-8434 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258881 - digium asterisk
asterisknow
s800i 		Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-1147 2011-08-24 12:16 2011-03-16 Show GitHub Exploit DB Packet Storm
258882 - mark_pilgrim feedparser feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration. CWE-399
 Resource Management Errors 		CVE-2011-1156 2011-08-24 12:16 2011-04-12 Show GitHub Exploit DB Packet Storm
258883 - mark_pilgrim feedparser Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2011-1157 2011-08-24 12:16 2011-04-12 Show GitHub Exploit DB Packet Storm
258884 - mark_pilgrim feedparser Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2011-1158 2011-08-24 12:16 2011-04-12 Show GitHub Exploit DB Packet Storm
258885 - ruby-lang ruby The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which a… CWE-189
Numeric Errors 		CVE-2011-0188 2011-08-24 12:15 2011-03-23 Show GitHub Exploit DB Packet Storm
258886 - ruby-lang ruby Per: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html 'This issue only affects 64-bit Ruby processes'. CWE-189
Numeric Errors 		CVE-2011-0188 2011-08-24 12:15 2011-03-23 Show GitHub Exploit DB Packet Storm
258887 - mark_pilgrim feedparser Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting 		CVE-2009-5065 2011-08-24 12:06 2011-04-12 Show GitHub Exploit DB Packet Storm
258888 - postfix postfix The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink a… CWE-59
Link Following 		CVE-2009-2939 2011-08-24 12:02 2009-09-22 Show GitHub Exploit DB Packet Storm
258889 - apple webkit page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rd… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1386 2011-08-23 13:00 2010-08-20 Show GitHub Exploit DB Packet Storm
258890 - ibm websphere_application_server PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2)… CWE-200
Information Exposure 		CVE-2008-5413 2011-08-23 13:00 2008-12-10 Show GitHub Exploit DB Packet Storm