Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 30, 2024, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191771 4.3 警告 Sebastian Heinlein
Canonical		 - Ubuntu で使用される Aptdaemon における任意のパッケージをインストールされる脆弱性 CWE-287
不適切な認証 		CVE-2012-0944 2012-06-6 16:08 2012-06-4 Show GitHub Exploit DB Packet Storm
191772 6.5 警告 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5093 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
191773 7.5 危険 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5092 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
191774 6.5 警告 Best Practical Solutions - Best Practical Solutions RT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4460 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
191775 3.5 注意 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4459 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
191776 6.8 警告 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4458 2012-06-6 14:12 2012-06-4 Show GitHub Exploit DB Packet Storm
191777 6.8 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-2085 2012-06-6 14:10 2012-06-4 Show GitHub Exploit DB Packet Storm
191778 4 警告 Best Practical Solutions - Best Practical Solutions RT における過去のパスワードハッシュを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-2084 2012-06-6 14:09 2012-06-4 Show GitHub Exploit DB Packet Storm
191779 4.3 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2083 2012-06-6 14:07 2012-06-4 Show GitHub Exploit DB Packet Storm
191780 5 警告 Best Practical Solutions - Best Practical Solutions RT における平文パスワードを検出される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-2082 2012-06-6 14:05 2012-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 30, 2024, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
741 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addon… CWE-79
Cross-site Scripting 		CVE-2024-47303 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
742 - - - Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to … - CVE-2024-40761 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
743 - - - Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. Th… CWE-269
 Improper Privilege Management 		CVE-2024-23454 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
744 4.3 MEDIUM
Network 		- - The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widget… CWE-1230
 Exposure of Sensitive Information Through Metadata 		CVE-2024-8910 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
745 5.3 MEDIUM
Network 		- - The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions u… CWE-862
 Missing Authorization 		CVE-2024-8678 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
746 8.8 HIGH
Network 		- - The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-8290 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
747 - - - The Ninja Forms Contact Form plugin for WordPress is vulnerable to Reflected Self-Based Cross-Site Scripting via the 'Referer' header in all versions up to, and including, 3.8.15 due to insufficient … CWE-79
Cross-site Scripting 		CVE-2024-3866 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
748 5.3 MEDIUM
Network 		- - The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress… CWE-862
 Missing Authorization 		CVE-2024-8658 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
749 - - - The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack - CVE-2024-7892 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
750 - - - The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even… - CVE-2024-7878 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm