Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
141 7.5 重要
Network 		Rockwell Automation 5015-u8ihft ファームウェア Rockwell Automation の 5015-u8ihft ファームウェアにおける脆弱性 CWE-20
CWE-noinfo
CVE-2024-45825 2024-10-3 10:02 2024-09-12 Show GitHub Exploit DB Packet Storm
142 8.8 重要
Network 		ferrislucas promptr ferrislucas の promptr におけるコードインジェクションの脆弱性 CWE-94
CWE-94
CVE-2024-46489 2024-10-3 10:01 2024-09-25 Show GitHub Exploit DB Packet Storm
143 6.5 警告
Network 		シスコシステムズ Cisco IOS
Cisco IOS XE 		シスコシステムズの Cisco IOS XE および Cisco IOS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-285
CWE-352
CVE-2024-20414 2024-10-3 10:01 2024-09-25 Show GitHub Exploit DB Packet Storm
144 5.5 警告
Local 		OpenText identity manager azuread driver OpenText の identity manager azuread driver におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
CWE-532
CVE-2021-22518 2024-10-3 09:58 2021-01-5 Show GitHub Exploit DB Packet Storm
145 5.3 警告
Adjacent 		Synology Inc. active backup for business agent Synology Inc. の active backup for business agent における重要なデータの暗号化の欠如に関する脆弱性 CWE-311
CWE-311
CVE-2023-52950 2024-10-3 09:58 2024-09-26 Show GitHub Exploit DB Packet Storm
146 5.4 警告
Network 		millbeck proroute h685t-w ファームウェア millbeckcommunications の proroute h685t-w ファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-38380 2024-10-3 09:58 2024-09-17 Show GitHub Exploit DB Packet Storm
147 5.5 警告
Local 		asg017 sqlite-vec asg017 の sqlite-vec における境界外書き込みに関する脆弱性 CWE-122
CWE-787
CVE-2024-46488 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
148 6.1 警告
Network 		ellevo ellevo ellevo におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-46655 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
149 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-47303 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
150 4.3 警告
Network 		ThemeHunk easy mega menu plugin ThemeHunk の WordPress 用 easy mega menu plugin における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-8434 2024-10-3 09:58 2024-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258901 - pioneers pioneers Pioneers (formerly gnocatan) before 0.11.3 allows remote attackers to cause a denial of service (crash) by triggering a delete operation while the Session object is still being used, as demonstrated … CWE-20
 Improper Input Validation  		CVE-2007-5933 2011-08-10 13:00 2007-11-14 Show GitHub Exploit DB Packet Storm
258902 - desklance desklance PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter. CWE-94
Code Injection 		CVE-2005-3835 2011-08-10 13:00 2005-11-27 Show GitHub Exploit DB Packet Storm
258903 - plone plone Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name param… CWE-79
Cross-site Scripting 		CVE-2011-1340 2011-08-8 13:00 2011-08-6 Show GitHub Exploit DB Packet Storm
258904 - gnu bash The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send esc… CWE-20
 Improper Input Validation  		CVE-2010-0002 2011-08-8 13:00 2010-01-15 Show GitHub Exploit DB Packet Storm
258905 - tibco runtime_agent The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak p… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0184 2011-08-8 13:00 2010-01-15 Show GitHub Exploit DB Packet Storm
258906 - ibm tivoli_directory_server The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted… CWE-20
 Improper Input Validation  		CVE-2010-0312 2011-08-8 13:00 2010-01-15 Show GitHub Exploit DB Packet Storm
258907 - google google_sketchup Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file. CWE-189
Numeric Errors 		CVE-2010-0316 2011-08-8 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm
258908 - freebsd freebsd The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0318 2011-08-8 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm
258909 - alex_kellner powermail SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection fiel… CWE-89
SQL Injection 		CVE-2010-0329 2011-08-8 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm
258910 - stefan_tannhaeuser tv21_talkshow Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vect… CWE-79
Cross-site Scripting 		CVE-2010-0331 2011-08-8 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm