Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 7, 2024, 10:02 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191551 5.1 警告 free php scripts - Free File Hosting の forgot_pass.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5762 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
191552 6.4 警告 airmagnet - AirMagnet Enterprise のコンソールにおけるネットワークトラフィックを読み取られる脆弱性 - CVE-2006-5746 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
191553 5 警告 airmagnet - AirMagnet Enterprise の AirMagnet Enterprise コンソールおよび Remote Sensor コンソールにおける任意の Web スクリプトまたは HTML を挿入される脆弱性 - CVE-2006-5742 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
191554 4.3 警告 airmagnet - AirMagnet Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5741 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
191555 7.5 危険 ATRC - ATutor における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5734 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
191556 4 警告 dxmsoft - XM Easy Personal FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2006-5728 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
191557 5 警告 aep networks - AEP Smartgate の SSL サーバにおけるディレクトリの存在を確認される脆弱性 CWE-200
情報漏えい 		CVE-2006-5725 2012-06-26 15:37 2006-11-3 Show GitHub Exploit DB Packet Storm
191558 7.5 危険 dataparksearch - DataparkSearch Engine における SQL インジェクションの脆弱性 - CVE-2006-5723 2012-06-26 15:37 2006-11-3 Show GitHub Exploit DB Packet Storm
191559 4.9 警告 Agnitum - Outpost Firewall PRO の \Device\sandbox ドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5721 2012-06-26 15:37 2006-11-3 Show GitHub Exploit DB Packet Storm
191560 7.5 危険 francisco burzi - Francisco Burzi PHP-Nuke の Journal モジュールにおける SQL インジェクションの脆弱性 - CVE-2006-5720 2012-06-26 15:37 2006-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1531 6.5 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitra… CWE-352
 Origin Validation Error 		CVE-2024-7864 2024-09-28 06:26 2024-09-13 Show GitHub Exploit DB Packet Storm
1532 6.5 MEDIUM
Network 		gowildchild visual_sound The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-8047 2024-09-28 06:25 2024-09-17 Show GitHub Exploit DB Packet Storm
1533 6.1 MEDIUM
Network 		outtolunchproductions simple_headline_rotator The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin … CWE-79
Cross-site Scripting 		CVE-2024-7860 2024-09-28 05:56 2024-09-12 Show GitHub Exploit DB Packet Storm
1534 6.1 MEDIUM
Network 		michalaugustyniak misiek_paypal The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… CWE-79
Cross-site Scripting 		CVE-2024-7861 2024-09-28 05:52 2024-09-12 Show GitHub Exploit DB Packet Storm
1535 8.0 HIGH
Adjacent 		tp-link archer_ax50_firmware
archer_a10_firmware
archer_ax10_firmware
archer_ax11000_firmware 		Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer A… CWE-78
OS Command  		CVE-2023-40357 2024-09-28 05:35 2023-09-6 Show GitHub Exploit DB Packet Storm
1536 5.4 MEDIUM
Network 		isarnet isarflow A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboa… CWE-79
Cross-site Scripting 		CVE-2023-34637 2024-09-28 05:35 2023-09-6 Show GitHub Exploit DB Packet Storm
1537 6.5 MEDIUM
Network 		zoom meeting_software_development_kit
video_software_development_kit
zoom 		Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access. NVD-CWE-Other
CVE-2023-43585 2024-09-28 05:15 2023-12-14 Show GitHub Exploit DB Packet Storm
1538 7.8 HIGH
Local 		zoom rooms Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access. NVD-CWE-noinfo
CVE-2023-43591 2024-09-28 05:15 2023-11-15 Show GitHub Exploit DB Packet Storm
1539 6.5 MEDIUM
Network 		zoom meeting_software_development_kit
zoom
virtual_desktop_infrastructure 		Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. CWE-287
Improper Authentication 		CVE-2023-39215 2024-09-28 05:15 2023-09-13 Show GitHub Exploit DB Packet Storm
1540 8.1 HIGH
Network 		zoom meeting_software_development_kit
rooms
zoom 		Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2023-39214 2024-09-28 05:15 2023-08-9 Show GitHub Exploit DB Packet Storm