Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 1, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191481 7.5 危険 david bennett - David Bennett PHPp の profile.php における SQL インジェクションの脆弱性 - CVE-2006-4879 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191482 5 警告 david bennett - David Bennett PHPp の footer.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4878 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191483 5 警告 david bennett - David Bennett PHPp における任意のプログラム変数を上書きされる脆弱性 - CVE-2006-4877 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191484 7.5 危険 aewebworks - AEDating における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4870 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191485 7.5 危険 gnuturk - GNUTurk 2G の mods.php における SQL インジェクションの脆弱性 - CVE-2006-4867 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191486 4.6 警告 アップル - Apple OS X の kextload におけるバッファオーバーフローの脆弱性 - CVE-2006-4866 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191487 7.5 危険 all enthusiast inc - All Enthusiast ReviewPost の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4864 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191488 7.5 危険 easypagecms - easypage の default.aspx における SQL インジェクションの脆弱性 - CVE-2006-4862 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191489 7.5 危険 clicktech - ClickTech ClickBlog の default.asp における SQL インジェクションの脆弱性 - CVE-2006-4857 2012-06-26 15:37 2006-09-19 Show GitHub Exploit DB Packet Storm
191490 7.5 危険 bolinos - BolinOS の system/_b/contentFiles/gBHTMLEditor.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4851 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 1, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2211 4.8 MEDIUM
Network 		mailcow mailcow\ mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is ex… CWE-79
Cross-site Scripting 		CVE-2024-41960 2024-09-20 05:01 2024-08-6 Show GitHub Exploit DB Packet Storm
2212 7.8 HIGH
Local 		sudo_project
fedoraproject
debian
netapp
mcafee
synology
beyondtrust
oracle 		sudo
fedora
debian_linux
cloud_backup
ontap_select_deploy_administration_utility
solidfire
hci_management_node
active_iq_unified_manager
oncommand_unified_manager_core_package… 		Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit… CWE-193
 Off-by-one Error 		CVE-2021-3156 2024-09-20 04:58 2021-01-27 Show GitHub Exploit DB Packet Storm
2213 6.1 MEDIUM
Network 		nuxt nuxt Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The `navigateTo` function attempts to blockthe `javascript:` protocol, but does not correctly … CWE-79
Cross-site Scripting 		CVE-2024-34343 2024-09-20 04:57 2024-08-6 Show GitHub Exploit DB Packet Storm
2214 9.8 CRITICAL
Network 		adobe
google
redhat
suse
opensuse 		flash_player
chrome
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_eus
linux_enterprise_desktop
ope… 		Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute ar… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2014-0497 2024-09-20 04:56 2014-02-5 Show GitHub Exploit DB Packet Storm
2215 8.1 HIGH
Network 		yunknet online_school_system A vulnerability was found in ?????????? Yunke Online School System up to 1.5.5. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/educloud/videobind.html… NVD-CWE-Other
CVE-2024-8417 2024-09-20 04:53 2024-09-5 Show GitHub Exploit DB Packet Storm
2216 8.8 HIGH
Network 		adobe
suse
opensuse
redhat 		flash_player
adobe_air_sdk
adobe_air
linux_enterprise_desktop
opensuse
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_deskto… 		Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on… CWE-415
 Double Free 		CVE-2014-0502 2024-09-20 04:53 2014-02-21 Show GitHub Exploit DB Packet Storm
2217 8.8 HIGH
Network 		adobe
suse
opensuse
redhat 		flash_player
linux_enterprise_desktop
opensuse
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus 		Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and… NVD-CWE-noinfo
CVE-2013-0648 2024-09-20 04:51 2013-02-27 Show GitHub Exploit DB Packet Storm
2218 8.8 HIGH
Network 		adobe
redhat
suse
opensuse 		flash_player
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
linux_enterprise_desktop
opensuse 		The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly rest… NVD-CWE-noinfo
CVE-2013-0643 2024-09-20 04:48 2013-02-27 Show GitHub Exploit DB Packet Storm
2219 4.3 MEDIUM
Network 		lunary lunary A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view … CWE-306
Missing Authentication for Critical Function 		CVE-2024-6582 2024-09-20 04:45 2024-09-14 Show GitHub Exploit DB Packet Storm
2220 8.8 HIGH
Network 		thingsboard thingsboard ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute (for content sent… CWE-74
Injection 		CVE-2023-45303 2024-09-20 04:35 2023-10-7 Show GitHub Exploit DB Packet Storm