Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 23, 2024, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192581 4.3 警告 Vanilla Forums - Vanilla Forums の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0526 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
192582 6.8 警告 VideoLAN - VideoLAN VLC メディアプレイヤーの StripTags 関数 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0522 2012-03-27 18:42 2011-02-7 Show GitHub Exploit DB Packet Storm
192583 7.5 危険 MaraDNS - MaraDNS の compress_add_dlabel_points 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-0520 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
192584 7.5 危険 gallarific - Gallarific PHP Photo Gallery script の gallery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0519 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
192585 5.1 警告 lotuscms - LotusCMS Fraise の core/lib/router.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0518 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
192586 7.5 危険 epromptc - E-PROMPT C BetMore Site Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0516 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
192587 2.1 注意 kingsoftsecurity - Kingsoft AntiVirus の KisKrnl.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-0515 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
192588 5 警告 ヒューレット・パッカード - HP Data Protector Manager の RDS サービス (rds.exe) におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-0514 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
192589 7.2 危険 securstar - SecurStar DriveCrypt の DCR.sys ドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0513 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
192590 6.8 警告 jikaka - Teams Structure モジュールの team.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0512 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 12:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability allows remote attackers to disclose sensit… Update NVD-CWE-Other
CVE-2023-46387 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
132 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vulnerability allows remote attackers to disclose smtp client a… Update CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2023-46386 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
133 7.5 HIGH
Network 		loytec l-inx_configurator LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote atta… Update CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2023-46385 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
134 7.5 HIGH
Network 		loytec l-inx_configurator LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authe… Update CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2023-46384 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
135 7.5 HIGH
Network 		loytec l-inx_configurator LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the p… Update CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2023-46383 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
136 9.8 CRITICAL
Network 		sfs winsure Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.This issue affects ww.Winsure: before 4.6.2. Update CWE-611
XXE 		CVE-2024-7098 2024-09-21 02:14 2024-09-17 Show GitHub Exploit DB Packet Storm
137 9.8 CRITICAL
Network 		sfs insuree_gl Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection.This issue affects InsureE GL: before 4.6.2. Update CWE-89
SQL Injection 		CVE-2024-6401 2024-09-21 02:07 2024-09-17 Show GitHub Exploit DB Packet Storm
138 7.8 HIGH
Local 		refuel autolabel An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a use… Update CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2024-27321 2024-09-21 02:06 2024-09-12 Show GitHub Exploit DB Packet Storm
139 8.8 HIGH
Network 		oretnom23 simple_forum\/discussion_system A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argu… New CWE-22
Path Traversal 		CVE-2024-9032 2024-09-21 02:04 2024-09-20 Show GitHub Exploit DB Packet Storm
140 9.8 CRITICAL
Network 		best_online_news_portal_project best_online_news_portal A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section.… Update CWE-89
SQL Injection 		CVE-2024-9008 2024-09-21 02:01 2024-09-20 Show GitHub Exploit DB Packet Storm