Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 28, 2024, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192031 2.6 注意 オラクル - Oracle SPARC Enterprise M シリーズサーバにおける XSCF Control Package (XCP) の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1693 2012-05-9 19:28 2012-04-17 Show GitHub Exploit DB Packet Storm
192032 4.3 警告 オラクル - Oracle Solaris におけるパスワードポリシーの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1684 2012-05-9 19:27 2012-04-17 Show GitHub Exploit DB Packet Storm
192033 4.9 警告 オラクル - Oracle Solaris における SCTP の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1692 2012-05-9 19:26 2012-04-17 Show GitHub Exploit DB Packet Storm
192034 4.9 警告 オラクル - Oracle Solaris におけるカーネルの sockfs の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1681 2012-05-9 19:26 2012-04-17 Show GitHub Exploit DB Packet Storm
192035 5.9 警告 オラクル - Oracle Solaris における gssd の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1683 2012-05-9 19:22 2012-04-17 Show GitHub Exploit DB Packet Storm
192036 6.2 警告 オラクル - Oracle Solaris における bsmconv および bsmunconv の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0539 2012-05-9 19:21 2012-04-17 Show GitHub Exploit DB Packet Storm
192037 6.4 警告 オラクル - Oracle Solaris における libsasl の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1694 2012-05-9 19:17 2012-04-17 Show GitHub Exploit DB Packet Storm
192038 6.6 警告 オラクル - Oracle Solaris におけるカーネルの特権処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1691 2012-05-9 19:16 2012-04-17 Show GitHub Exploit DB Packet Storm
192039 6.8 警告 オラクル - Oracle iPlanet Web Server における管理コンソールの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0516 2012-05-9 18:56 2012-04-17 Show GitHub Exploit DB Packet Storm
192040 6.8 警告 オラクル - Oracle GlassFish Server における Web コンテナの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0550 2012-05-9 18:54 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 28, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 6.4 MEDIUM
Network 		- - The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52 due to insufficient… New CWE-79
Cross-site Scripting 		CVE-2024-8681 2024-09-27 16:15 2024-09-27 Show GitHub Exploit DB Packet Storm
242 - - - The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissi… New - CVE-2024-7400 2024-09-27 16:15 2024-09-27 Show GitHub Exploit DB Packet Storm
243 7.2 HIGH
Network 		- - The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 3.16.1 due to insu… New CWE-89
SQL Injection 		CVE-2024-9130 2024-09-27 15:15 2024-09-27 Show GitHub Exploit DB Packet Storm
244 6.4 MEDIUM
Network 		- - The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom post criteria in all versions up to, and including, 1.1.3 due to insufficient i… New - CVE-2024-8965 2024-09-27 15:15 2024-09-27 Show GitHub Exploit DB Packet Storm
245 8.8 HIGH
Network 		- - The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.33.32 via deserialization of untr… New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-8922 2024-09-27 15:15 2024-09-27 Show GitHub Exploit DB Packet Storm
246 - - - The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated user to disconnect the AI ChatBot with ChatGPT and … New - CVE-2024-7714 2024-09-27 15:15 2024-09-27 Show GitHub Exploit DB Packet Storm
247 - - - The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it New - CVE-2024-7713 2024-09-27 15:15 2024-09-27 Show GitHub Exploit DB Packet Storm
248 - - - Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-… New - CVE-2024-7011 2024-09-27 12:15 2024-09-27 Show GitHub Exploit DB Packet Storm
249 7.8 HIGH
Local 		hitachi eh-view ** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclos… Update CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2023-39984 2024-09-27 11:15 2023-08-23 Show GitHub Exploit DB Packet Storm
250 8.8 HIGH
Network 		tosei-corporation online_store_management_system A vulnerability was found in Tosei Online Store Management System ??????????? 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/… Update CWE-77
Command Injection 		CVE-2024-7896 2024-09-27 10:16 2024-08-17 Show GitHub Exploit DB Packet Storm