Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192731 3.5 注意 IBM - IBM WCM におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2010-4807 2012-03-27 18:42 2011-04-3 Show GitHub Exploit DB Packet Storm
192732 10 危険 mojolicious - Mojolicious における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4803 2012-03-27 18:42 2011-05-2 Show GitHub Exploit DB Packet Storm
192733 10 危険 mojolicious - Mojolicious の Commands.pm における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4802 2012-03-27 18:42 2011-05-2 Show GitHub Exploit DB Packet Storm
192734 6 警告 baconmap - BaconMap の admin/updatelist.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4801 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
192735 7.5 危険 baconmap - BaconMap の doadd.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4800 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
192736 6.8 警告 Chipmunk Scripts - Chipmunk Pwngame における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4799 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
192737 6.8 警告 OrangeHRM - OrangeHRM におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4798 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
192738 7.5 危険 truworthit - Truworth Flex Timesheet のログインフォームにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4797 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
192739 7.5 危険 phpyun - PHPYun における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4796 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
192740 7.5 危険 joomlaseller
Joomla!		 - Joomla! の com_jscalendar コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4795 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 22, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 - - - A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation lea… New CWE-313
CVE-2024-9040 2024-09-21 02:15 2024-09-21 Show GitHub Exploit DB Packet Storm
122 - - - Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however, it is possible to create or update a boost using another user… New - CVE-2024-45489 2024-09-21 02:15 2024-09-21 Show GitHub Exploit DB Packet Storm
123 - - - Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLog… New - CVE-2024-37879 2024-09-21 02:15 2024-09-21 Show GitHub Exploit DB Packet Storm
124 - - - An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. New - CVE-2023-47480 2024-09-21 02:15 2024-09-21 Show GitHub Exploit DB Packet Storm
125 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allows remote attackers to disclose sensitive… Update NVD-CWE-Other
CVE-2023-46389 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
126 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows remote attackers to disclose smtp clien… Update CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2023-46388 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
127 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability allows remote attackers to disclose sensit… Update NVD-CWE-Other
CVE-2023-46387 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
128 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vulnerability allows remote attackers to disclose smtp client a… Update CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2023-46386 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
129 7.5 HIGH
Network 		loytec l-inx_configurator LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote atta… Update CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2023-46385 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
130 7.5 HIGH
Network 		loytec l-inx_configurator LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authe… Update CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2023-46384 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm