Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191691 7.5 危険 Andreas Gohr - DokuWiki の lib/exec/fetch.php における任意のコマンドを実行される脆弱性 - CVE-2006-5099 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
191692 5 警告 Andreas Gohr - DokuWiki の lib/exec/fetch.php におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5098 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
191693 7.5 危険 Yegnold - A-Blog の navigation/menu.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5092 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
191694 7.5 危険 evobb - evoBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5087 2012-06-26 15:37 2006-09-29 Show GitHub Exploit DB Packet Storm
191695 7.5 危険 back-end - OpenConcept Back-End における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5076 2012-06-26 15:37 2006-09-28 Show GitHub Exploit DB Packet Storm
191696 4.3 警告 eyeOS Project - eyeOS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5071 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
191697 5.1 警告 facestones - faceStones Personal の fsl2/objects/fs_form_links.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5070 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
191698 7.5 危険 brudaswen - Brudaswen BrudaNews の admin/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5068 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
191699 5.1 警告 danphpsupport - DanPHPSupport におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5066 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
191700 5.1 警告 BirdBlog - BirdBlog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5064 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2471 7.5 HIGH
Network 		oracle sales_for_handhelds Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Pocket Outlook Sync(PocketPC)). Supported versions that are affected are 12.2.3-12.2.12. Easily exploit… NVD-CWE-noinfo
CVE-2023-21855 2024-09-24 05:35 2023-01-18 Show GitHub Exploit DB Packet Storm
2472 - - - Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects: ?Product Affected Versions LoadMaster From 7.… CWE-20
 Improper Input Validation  		CVE-2024-6658 2024-09-24 05:15 2024-09-13 Show GitHub Exploit DB Packet Storm
2473 - - - A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigur… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-3653 2024-09-24 05:15 2024-07-9 Show GitHub Exploit DB Packet Storm
2474 7.8 HIGH
Local 		linux linux_kernel A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local … CWE-416
 Use After Free 		CVE-2024-0582 2024-09-24 05:15 2024-01-17 Show GitHub Exploit DB Packet Storm
2475 7.5 HIGH
Network 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet. CWE-281
 Improper Preservation of Permissions 		CVE-2024-27795 2024-09-24 05:01 2024-09-17 Show GitHub Exploit DB Packet Storm
2476 5.5 MEDIUM
Local 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. CWE-281
 Improper Preservation of Permissions 		CVE-2024-27858 2024-09-24 04:56 2024-09-17 Show GitHub Exploit DB Packet Storm
2477 7.1 HIGH
Local 		acronis agent Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343. CWE-862
 Missing Authorization 		CVE-2023-45246 2024-09-24 04:54 2023-10-6 Show GitHub Exploit DB Packet Storm
2478 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause a denial-of-service. NVD-CWE-noinfo
CVE-2024-23237 2024-09-24 04:53 2024-09-17 Show GitHub Exploit DB Packet Storm
2479 7.2 HIGH
Network 		litellm litellm An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to improper neutralization of special elem… CWE-89
SQL Injection 		CVE-2024-5225 2024-09-24 04:46 2024-06-7 Show GitHub Exploit DB Packet Storm
2480 7.5 HIGH
Network 		drupal drupal In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading… NVD-CWE-noinfo
CVE-2023-5256 2024-09-24 04:35 2023-09-29 Show GitHub Exploit DB Packet Storm