Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 2, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191661 7.5 危険 e107.org - e107 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4548 2012-06-26 15:37 2006-09-5 Show GitHub Exploit DB Packet Storm
191662 7.5 危険 exbb - ExBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4544 2012-06-26 15:37 2006-09-5 Show GitHub Exploit DB Packet Storm
191663 7.5 危険 Cerberus, LLC - Cerberus Helpdesk の Client Support Center における重要な情報を取得される脆弱性 - CVE-2006-4539 2012-06-26 15:37 2006-09-5 Show GitHub Exploit DB Packet Storm
191664 2.1 注意 dec - OpenVMS ALPHA の DECnet-Plus におけるパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2006-4537 2012-06-26 15:37 2006-09-5 Show GitHub Exploit DB Packet Storm
191665 7.5 危険 cms frogss - CMS Frogss の module/rejestracja.php における SQL インジェクションの脆弱性 - CVE-2006-4536 2012-06-26 15:37 2006-09-5 Show GitHub Exploit DB Packet Storm
191666 7.5 危険 bernard pacques - YACS CMS の articles/article.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4532 2012-06-26 15:37 2006-09-1 Show GitHub Exploit DB Packet Storm
191667 7.5 危険 bare concept media - Pheap CMS の lib/config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4531 2012-06-26 15:37 2006-09-1 Show GitHub Exploit DB Packet Storm
191668 2.6 注意 devellion - CubeCart における PHP リモートファイルインクルージョン攻撃を誘発する脆弱性 - CVE-2006-4527 2012-06-26 15:37 2006-08-28 Show GitHub Exploit DB Packet Storm
191669 7.5 危険 devellion - CubeCart の includes/content/viewCat.inc.php における SQL インジェクションの脆弱性 - CVE-2006-4526 2012-06-26 15:37 2006-08-28 Show GitHub Exploit DB Packet Storm
191670 4.3 警告 devellion - CubeCart におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4525 2012-06-26 15:37 2006-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 3, 2024, 5:55 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1881 7.5 HIGH
Network 		oracle access_manager Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allow… NVD-CWE-noinfo
CVE-2022-39412 2024-09-24 03:35 2022-10-19 Show GitHub Exploit DB Packet Storm
1882 8.1 HIGH
Network 		oracle peoplesoft_enterprise_common_components Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft (component: Approval Framework). The supported version that is affected is 9.2. Easily exploitable vulnerabil… NVD-CWE-noinfo
CVE-2022-39406 2024-09-24 03:35 2022-10-19 Show GitHub Exploit DB Packet Storm
1883 6.5 MEDIUM
Network 		backstage backstage Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the s… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2024-45815 2024-09-24 03:31 2024-09-18 Show GitHub Exploit DB Packet Storm
1884 5.4 MEDIUM
Network 		backstage backstage Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content th… CWE-79
Cross-site Scripting 		CVE-2024-46976 2024-09-24 03:27 2024-09-18 Show GitHub Exploit DB Packet Storm
1885 6.1 MEDIUM
Network 		google chrome Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts… CWE-79
Cross-site Scripting 		CVE-2024-8907 2024-09-24 03:23 2024-09-18 Show GitHub Exploit DB Packet Storm
1886 6.1 MEDIUM
Network 		oretnom23 resort_reservation_system A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipul… CWE-79
Cross-site Scripting 		CVE-2024-8951 2024-09-24 03:12 2024-09-18 Show GitHub Exploit DB Packet Storm
1887 7.5 HIGH
Network 		micropython micropython A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffe… CWE-787
 Out-of-bounds Write 		CVE-2024-8948 2024-09-24 03:10 2024-09-18 Show GitHub Exploit DB Packet Storm
1888 8.8 HIGH
Network 		oretnom23 online_eyewear_shop A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. Th… CWE-282
 Improper Ownership Management 		CVE-2024-8949 2024-09-24 03:05 2024-09-18 Show GitHub Exploit DB Packet Storm
1889 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) NVD-CWE-noinfo
CVE-2024-8908 2024-09-24 02:59 2024-09-18 Show GitHub Exploit DB Packet Storm
1890 6.1 MEDIUM
Network 		netcat netcat_content_management_system A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly… CWE-79
Cross-site Scripting 		CVE-2024-8653 2024-09-24 02:55 2024-09-20 Show GitHub Exploit DB Packet Storm