Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 28, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192091 5 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0535 2012-05-9 14:50 2012-04-17 Show GitHub Exploit DB Packet Storm
192092 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0537 2012-05-9 14:50 2012-04-17 Show GitHub Exploit DB Packet Storm
192093 4.3 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0520 2012-05-9 14:30 2012-04-17 Show GitHub Exploit DB Packet Storm
192094 5.5 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0512 2012-05-9 14:14 2012-04-17 Show GitHub Exploit DB Packet Storm
192095 5.8 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0528 2012-05-9 14:11 2012-04-17 Show GitHub Exploit DB Packet Storm
192096 6.4 警告 オラクル - Oracle Database Server の OCI における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0511 2012-05-9 13:56 2012-04-17 Show GitHub Exploit DB Packet Storm
192097 6.4 警告 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0510 2012-05-9 13:56 2012-04-17 Show GitHub Exploit DB Packet Storm
192098 7.1 危険 オラクル - Windows 上で稼働する Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0519 2012-05-9 13:55 2012-04-17 Show GitHub Exploit DB Packet Storm
192099 4 警告 オラクル - Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1690 2012-05-9 11:46 2012-04-17 Show GitHub Exploit DB Packet Storm
192100 4 警告 オラクル - Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1696 2012-05-9 11:45 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 28, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 6.1 MEDIUM
Network 		outtolunchproductions simple_headline_rotator The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin … Update CWE-79
Cross-site Scripting 		CVE-2024-7860 2024-09-28 05:56 2024-09-12 Show GitHub Exploit DB Packet Storm
42 6.1 MEDIUM
Network 		michalaugustyniak misiek_paypal The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… Update CWE-79
Cross-site Scripting 		CVE-2024-7861 2024-09-28 05:52 2024-09-12 Show GitHub Exploit DB Packet Storm
43 - - - TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit f… New - CVE-2024-46097 2024-09-28 05:35 2024-09-28 Show GitHub Exploit DB Packet Storm
44 - - - A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php. New - CVE-2024-25411 2024-09-28 05:35 2024-09-28 Show GitHub Exploit DB Packet Storm
45 - - - Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function. New - CVE-2024-40508 2024-09-28 05:35 2024-09-27 Show GitHub Exploit DB Packet Storm
46 8.0 HIGH
Adjacent 		tp-link archer_ax50_firmware
archer_a10_firmware
archer_ax10_firmware
archer_ax11000_firmware 		Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer A… Update CWE-78
OS Command  		CVE-2023-40357 2024-09-28 05:35 2023-09-6 Show GitHub Exploit DB Packet Storm
47 5.4 MEDIUM
Network 		isarnet isarflow A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboa… Update CWE-79
Cross-site Scripting 		CVE-2023-34637 2024-09-28 05:35 2023-09-6 Show GitHub Exploit DB Packet Storm
48 - - - An input validation vulnerability exists in the Rockwell Automation Sequence Manager™ which could allow a malicious user to send malformed packets to the server and cause a denial-of-service conditio… New - CVE-2024-6436 2024-09-28 05:15 2024-09-28 Show GitHub Exploit DB Packet Storm
49 - - - Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access. Update - CVE-2024-24698 2024-09-28 05:15 2024-02-14 Show GitHub Exploit DB Packet Storm
50 6.5 MEDIUM
Network 		zoom meeting_software_development_kit
video_software_development_kit
zoom 		Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access. Update NVD-CWE-Other
CVE-2023-43585 2024-09-28 05:15 2023-12-14 Show GitHub Exploit DB Packet Storm