Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 27, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192041 7.2 危険 オラクル - Oracle Grid Engine における sgepasswd の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0523 2012-05-9 18:47 2012-04-17 Show GitHub Exploit DB Packet Storm
192042 9 危険 オラクル - Oracle Grid Engine における qrsh の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0208 2012-05-9 18:39 2012-04-17 Show GitHub Exploit DB Packet Storm
192043 3.2 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools におけるファイル処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0524 2012-05-9 18:28 2012-04-17 Show GitHub Exploit DB Packet Storm
192044 3.5 注意 オラクル - Oracle PeopleSoft Enterprise Portal における Enterprise Portal の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0531 2012-05-9 18:28 2012-04-17 Show GitHub Exploit DB Packet Storm
192045 3.5 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0529 2012-05-9 18:27 2012-04-17 Show GitHub Exploit DB Packet Storm
192046 3.5 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における PIA Core Technology の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0561 2012-05-9 18:26 2012-04-17 Show GitHub Exploit DB Packet Storm
192047 4 警告 オラクル - Oracle PeopleSoft Enterprise SCM における eProcurement の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0530 2012-05-9 18:25 2012-04-17 Show GitHub Exploit DB Packet Storm
192048 4 警告 オラクル - Oracle PeopleSoft Enterprise SCM における請求 (Billing) 処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0559 2012-05-9 18:24 2012-04-17 Show GitHub Exploit DB Packet Storm
192049 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eCompensation の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0536 2012-05-9 18:22 2012-04-17 Show GitHub Exploit DB Packet Storm
192050 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0562 2012-05-9 18:22 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 28, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 8.8 HIGH
Network 		dedebiz dedebiz A vulnerability classified as critical was found in DedeBIZ 6.3.0. This vulnerability affects the function get_mime_type of the file /admin/dialog/select_images_post.php of the component Attachment S… Update CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7906 2024-09-28 02:54 2024-08-18 Show GitHub Exploit DB Packet Storm
2 9.1 CRITICAL
Network 		centurysys futurenet_nxr-1300_firmware
futurenet_nxr-g050_firmware
futurenet_nxr-610x_firmware
futurenet_vxr-x64
futurenet_vxr-x86
futurenet_nxr-g060_firmware
futurenet_nxr-g100_firmware
fu… 		Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker t… Update CWE-1188
 Insecure Default Initialization of Resource 		CVE-2024-31070 2024-09-28 02:54 2024-07-17 Show GitHub Exploit DB Packet Storm
3 8.8 HIGH
Network 		centurysys futurenet_nxr-1300_firmware
futurenet_nxr-g050_firmware
futurenet_nxr-610x_firmware
futurenet_vxr-x64
futurenet_vxr-x86
futurenet_nxr-g060_firmware
futurenet_nxr-g100_firmware
fu… 		FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the prod… Update CWE-78
OS Command  		CVE-2024-36475 2024-09-28 02:50 2024-07-17 Show GitHub Exploit DB Packet Storm
4 6.5 MEDIUM
Network 		github enterprise_server An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with only content: read and pull_request_write: write permissions to read issue content i… Update CWE-863
 Incorrect Authorization 		CVE-2024-6337 2024-09-28 02:48 2024-08-21 Show GitHub Exploit DB Packet Storm
5 5.3 MEDIUM
Network 		starkdigital wp_testimonial_widget The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and i… Update CWE-862
 Missing Authorization 		CVE-2024-7390 2024-09-28 02:45 2024-08-21 Show GitHub Exploit DB Packet Storm
6 - - - The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information. New - CVE-2024-46471 2024-09-28 02:35 2024-09-28 Show GitHub Exploit DB Packet Storm
7 - - - Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component. New - CVE-2024-46470 2024-09-28 02:35 2024-09-28 Show GitHub Exploit DB Packet Storm
8 - - - An authenticated cross-site scripting (XSS) vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter unde… New - CVE-2024-46333 2024-09-28 02:35 2024-09-28 Show GitHub Exploit DB Packet Storm
9 - - - ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website vi… New - CVE-2024-46331 2024-09-28 02:35 2024-09-28 Show GitHub Exploit DB Packet Storm
10 - - - Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function. New - CVE-2024-40509 2024-09-28 02:35 2024-09-28 Show GitHub Exploit DB Packet Storm