Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 7, 2024, 12:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188961 6.8 警告 Angry Donuts
Drupal		 - Drupal の Chaos Tool Suite モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-1547 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
188962 6 警告 Angry Donuts
Drupal		 - Drupal の Chaos Tool Suite モジュールの import 機能における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1546 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
188963 5 警告 ACME Laboratories
rca		 - RCA DCM425 ケーブルモデムの micro_httpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1544 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
188964 4.3 警告 etracker
Drupal		 - Drupal の eTracker モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1543 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
188965 6.8 警告 dragonfrugal - DFD Cart の admin/configure.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-1542 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
188966 4.3 警告 dragonfrugal - DFD Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1541 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
188967 7.5 危険 bluestrikeweb - phpRAINCHECK の print_raincheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1538 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
188968 7.5 危険 francois bissonnette - phpCDB におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1537 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
188969 5 警告 givesight
Joomla!		 - Joomla! の givesight powermail コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1532 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
188970 7.5 危険 Freestyle Software
Joomla!		 - Joomla! の fsf コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1529 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 7, 2024, 12:22 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 8.1 HIGH
Network 		loginizer loginizer The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2. This is due to insufficient verification on the user be… New NVD-CWE-noinfo
CVE-2024-10097 2024-11-7 04:14 2024-11-5 Show GitHub Exploit DB Packet Storm
142 4.3 MEDIUM
Network 		shaon post_from_frontend The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack New CWE-352
 Origin Validation Error 		CVE-2024-9689 2024-11-7 04:14 2024-11-5 Show GitHub Exploit DB Packet Storm
143 - - - In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit started to use the ptp workqueue to get the s… Update - CVE-2024-38593 2024-11-7 03:35 2024-06-19 Show GitHub Exploit DB Packet Storm
144 - - - OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. Update - CVE-2024-22006 2024-11-7 03:35 2024-03-12 Show GitHub Exploit DB Packet Storm
145 - - - The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify fo… Update - CVE-2024-23674 2024-11-7 03:35 2024-02-16 Show GitHub Exploit DB Packet Storm
146 6.5 MEDIUM
Adjacent 		elecom wrc-1167ghbk-s_firmware
wrc-1167gebk-s_firmware
wrc-1167febk-s_firmware
wrc-1167ghbk3-a_firmware
wrc-1167febk-a_firmware 		ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are… Update NVD-CWE-noinfo
CVE-2023-37563 2024-11-7 03:35 2023-07-13 Show GitHub Exploit DB Packet Storm
147 3.3 LOW
Local 		google android In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation of privilege with no… Update CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2023-21246 2024-11-7 03:35 2023-07-13 Show GitHub Exploit DB Packet Storm
148 9.8 CRITICAL
Network 		nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, cau… Update NVD-CWE-noinfo
CVE-2024-49368 2024-11-7 03:28 2024-10-22 Show GitHub Exploit DB Packet Storm
149 - - - UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. ¶¶ The vulnerability allows attackers to perform XSS in SVG file extension, which can be used to steali… New - CVE-2024-50637 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
150 - - - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability … New CWE-79
Cross-site Scripting 		CVE-2024-20539 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm