Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 29, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190491 6.6 警告 アップル
FreeBSD		 - Mac OS X および FreeBSD カーネルの ufs_lookup 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-0267 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190492 7.5 危険 ezboxx - Ezboxx Portal System Beta の boxx/showAppendix.asp における SQL インジェクションの脆弱性 - CVE-2007-0266 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190493 6.8 警告 ezboxx - Ezboxx Portal System におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0265 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190494 7.8 危険 ezboxx - Ezboxx Portal System における重要な情報を取得される脆弱性 - CVE-2007-0259 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190495 6.8 警告 OpenSolution
fastilo		 - Fastilo および Open Solution Quick.Cart の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0258 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190496 7.5 危険 easy-content filemanager - easy-content ファイルマネージャにおける任意のファイルをアップロードされる脆弱性 - CVE-2007-0252 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190497 6.8 警告 GForge Group - GForge の CVSWeb CGI における任意のコマンドを実行される脆弱性 - CVE-2007-0246 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
190498 10 危険 アップル - Apple Mac OS X の _ATPsndrsp 関数における二重解放の脆弱性 CWE-119
バッファエラー 		CVE-2007-0236 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
190499 7.2 危険 アップル
FreeBSD		 - Mac OS X の ffs_mountfs 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-0229 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
190500 5 警告 eiqnetworks - EIQ Networks Network Security Analyzer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0228 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 29, 2024, 4:11 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 6.1 MEDIUM
Network 		mm-breaking_news_project mm-breaking_news The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting… Update CWE-79
Cross-site Scripting 		CVE-2024-8056 2024-09-28 06:29 2024-09-12 Show GitHub Exploit DB Packet Storm
92 6.1 MEDIUM
Network 		mm-breaking_news_project mm-breaking_news The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add S… Update CWE-79
Cross-site Scripting 		CVE-2024-8054 2024-09-28 06:29 2024-09-12 Show GitHub Exploit DB Packet Storm
93 4.8 MEDIUM
Network 		ninjateam header_footer_custom_code The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit… Update CWE-79
Cross-site Scripting 		CVE-2024-6617 2024-09-28 06:28 2024-09-13 Show GitHub Exploit DB Packet Storm
94 4.8 MEDIUM
Network 		ninjateam header_footer_custom_code The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit… Update CWE-79
Cross-site Scripting 		CVE-2024-6493 2024-09-28 06:28 2024-09-13 Show GitHub Exploit DB Packet Storm
95 6.8 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary f… Update CWE-352
 Origin Validation Error 		CVE-2024-7863 2024-09-28 06:27 2024-09-13 Show GitHub Exploit DB Packet Storm
96 4.8 MEDIUM
Network 		premio my_sticky_bar The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputtin… Update CWE-79
Cross-site Scripting 		CVE-2024-7133 2024-09-28 06:27 2024-09-13 Show GitHub Exploit DB Packet Storm
97 6.5 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitra… Update CWE-352
 Origin Validation Error 		CVE-2024-7864 2024-09-28 06:26 2024-09-13 Show GitHub Exploit DB Packet Storm
98 6.5 MEDIUM
Network 		gowildchild visual_sound The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Update CWE-352
 Origin Validation Error 		CVE-2024-8047 2024-09-28 06:25 2024-09-17 Show GitHub Exploit DB Packet Storm
99 - - - A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component … New CWE-89
SQL Injection 		CVE-2024-9293 2024-09-28 06:15 2024-09-28 Show GitHub Exploit DB Packet Storm
100 - - - A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. Affected is an unknown function of the file /ueditor/upload?configPath=… New CWE-79
Cross-site Scripting 		CVE-2024-9291 2024-09-28 06:15 2024-09-28 Show GitHub Exploit DB Packet Storm