Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 3, 2024, 10:02 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190371 7.5 危険 aimstats - AimStats の process.php における PHP コードを挿入される脆弱性 - CVE-2007-2168 2012-06-26 15:46 2007-04-22 Show GitHub Exploit DB Packet Storm
190372 7.5 危険 aimstats - AimStats の process.php における PHP コードを挿入される脆弱性 - CVE-2007-2167 2012-06-26 15:46 2007-04-22 Show GitHub Exploit DB Packet Storm
190373 5 警告 アップル - Apple Safari におけるサービス運用妨害 (DoS) 状態となる脆弱性 - CVE-2007-2163 2012-06-26 15:46 2007-04-22 Show GitHub Exploit DB Packet Storm
190374 7.8 危険 GNU Project
Mozilla Foundation		 - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2162 2012-06-26 15:46 2007-04-22 Show GitHub Exploit DB Packet Storm
190375 7.5 危険 Drupal - Drupal 用の dba モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2160 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
190376 4.3 警告 Drupal - Drupal 用の dba モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2159 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
190377 7.5 危険 cabron connector - Cabron Connector の services/samples/inclusionService.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2154 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
190378 6.8 警告 atmail pty ltd - Atmail の atmail.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2153 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
190379 7.8 危険 bluearc - BlueArc Titan デバイスの BlueArc-FTPD における他のサイトへトラフィックをリダイレクトする脆弱性 - CVE-2007-2150 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
190380 7.5 危険 bonoestente - Joomla! の Be2004-2 テンプレートの index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2143 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 3, 2024, 5:55 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
381 6.4 MEDIUM
Network 		- - The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘get_slider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and ou… New CWE-79
Cross-site Scripting 		CVE-2024-8324 2024-10-1 18:15 2024-10-1 Show GitHub Exploit DB Packet Storm
382 6.4 MEDIUM
Network 		- - The Guten Post Layout – An Advanced Post Grid Collection for WordPress Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:guten-post-… New CWE-79
Cross-site Scripting 		CVE-2024-8288 2024-10-1 18:15 2024-10-1 Show GitHub Exploit DB Packet Storm
383 6.4 MEDIUM
Network 		- - The LocateAndFilter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.14 due to insufficient input sanitization and outp… New - CVE-2024-9304 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
384 6.4 MEDIUM
Network 		- - The Elastik Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.4 due to insufficient input sanitization and… New CWE-79
Cross-site Scripting 		CVE-2024-9274 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
385 6.4 MEDIUM
Network 		- - The R Animated Icon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and … New CWE-79
Cross-site Scripting 		CVE-2024-9272 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
386 6.4 MEDIUM
Network 		- - The Relogo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.2 due to insufficient input sanitization and output escapin… New CWE-79
Cross-site Scripting 		CVE-2024-9269 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
387 6.1 MEDIUM
Network 		- - The Easy WordPress Subscribe – Optin Hound plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions… New CWE-79
Cross-site Scripting 		CVE-2024-9267 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
388 - - - Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user… New - CVE-2024-9145 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
389 - - - The SVG Complete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output e… New CWE-79
Cross-site Scripting 		CVE-2024-9119 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm
390 9.8 CRITICAL
Network 		- - The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and inc… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-9108 2024-10-1 17:15 2024-10-1 Show GitHub Exploit DB Packet Storm