Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 4, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191951 7.5 危険 Drupal - Drupal の Job Search モジュールにおける SQL インジェクションの脆弱性 - CVE-2006-4107 2012-06-26 15:37 2006-08-7 Show GitHub Exploit DB Packet Storm
191952 4.3 警告 blursoft - blursoft blur6ex におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4106 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
191953 4.3 警告 fill threads database - FTD におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4105 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
191954 7.5 危険 falko timme and till brehm - Falko Timme および Till Brehm SQLiteWebAdmin の tpl.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4102 2012-06-26 15:37 2006-08-14 Show GitHub Exploit DB Packet Storm
191955 7.5 危険 ビジネスオブジェクツ - Business Objects Crystal Enterprise における他のユーザのセッションをハイジャックされる脆弱性 - CVE-2006-4099 2012-06-26 15:37 2006-11-29 Show GitHub Exploit DB Packet Storm
191956 4.3 警告 archangelmgt - Archangel Management Archangel Weblog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4091 2012-06-26 15:37 2006-08-11 Show GitHub Exploit DB Packet Storm
191957 5 警告 andy lo-a-foe - Andy Lo-A-Foe AlsaPlayer におけるバッファオーバーフローの脆弱性 - CVE-2006-4089 2012-06-26 15:37 2006-08-11 Show GitHub Exploit DB Packet Storm
191958 4.3 警告 civicspace - CivicSpace におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4088 2012-06-26 15:37 2006-08-11 Show GitHub Exploit DB Packet Storm
191959 10 危険 david walker - phpAMA における詳細不明な脆弱性 - CVE-2006-4084 2012-06-26 15:37 2006-08-2 Show GitHub Exploit DB Packet Storm
191960 7.2 危険 バラクーダネットワークス - BSF における権限を取得される脆弱性 - CVE-2006-4082 2012-06-26 15:37 2006-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 4, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 9.8 CRITICAL
Network 		doverfuelingsolutions progauge_maglink_lx_console_firmware
progauge_maglink_lx4_console_firmware 		An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly. Update NVD-CWE-Other
CVE-2024-43692 2024-10-2 01:22 2024-09-25 Show GitHub Exploit DB Packet Storm
652 9.8 CRITICAL
Network 		doverfuelingsolutions progauge_maglink_lx_console_firmware
progauge_maglink_lx4_console_firmware 		A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands. Update CWE-77
Command Injection 		CVE-2024-45066 2024-10-2 01:18 2024-09-25 Show GitHub Exploit DB Packet Storm
653 - - - A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox < 131, Firefox E… New - CVE-2024-9399 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
654 - - - By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vuln… New - CVE-2024-9398 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
655 - - - A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 1… New - CVE-2024-9397 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
656 - - - A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in the download dialog. *This bug only affects Firefox for Android. Other versions o… New - CVE-2024-9395 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
657 - - - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow them to access cross-origin JSON content. This ac… New - CVE-2024-9394 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
658 - - - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This acces… New - CVE-2024-9393 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
659 - - - A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no long… New - CVE-2024-9391 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm
660 - - - NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HT… New CWE-79
Cross-site Scripting 		CVE-2024-47604 2024-10-2 01:15 2024-10-2 Show GitHub Exploit DB Packet Storm