Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Sept. 25, 2024, 2:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 192781 | 4.3 | 警告 | SMC Networks | - | SMC SMCD3G-CCR の Web 管理ポータル におけるセッションをハイジャックされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2011-0887 | 2012-03-27 18:43 | 2011-02-8 | Show | GitHub Exploit DB Packet Storm |
| 192782 | 6.8 | 警告 | SMC Networks | - | SMC SMCD3G-CCR の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2011-0886 | 2012-03-27 18:43 | 2011-02-8 | Show | GitHub Exploit DB Packet Storm |
| 192783 | 10 | 危険 | SMC Networks | - | SMC SMCD3G-CCR の 特定の Comcast Business Gateway 設定における管理アクセスを取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-0885 | 2012-03-27 18:43 | 2011-02-8 | Show | GitHub Exploit DB Packet Storm |
| 192784 | 5.8 | 警告 | オラクル | - | Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける Enterprise Infrastructure SEC の処理に関連する脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-0803 | 2012-03-27 18:43 | 2011-04-19 | Show | GitHub Exploit DB Packet Storm |
| 192785 | 5 | 警告 | PivotX | - | PivotX の pivotx/modules/module_image.php における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-0775 | 2012-03-27 18:43 | 2011-01-27 | Show | GitHub Exploit DB Packet Storm |
| 192786 | 5 | 警告 | PivotX | - | PivotX における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-0774 | 2012-03-27 18:43 | 2011-01-11 | Show | GitHub Exploit DB Packet Storm |
| 192787 | 4.3 | 警告 | PivotX | - | PivotX の pivotx/modules/module_image.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-0773 | 2012-03-27 18:43 | 2011-01-31 | Show | GitHub Exploit DB Packet Storm |
| 192788 | 4.3 | 警告 | PivotX | - | PivotX におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-0772 | 2012-03-27 18:43 | 2011-01-11 | Show | GitHub Exploit DB Packet Storm |
| 192789 | 6.8 | 警告 | JanRain | - | Janrain Engage モジュール におけるクロスサイトスクリプティングの脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0771 | 2012-03-27 18:43 | 2011-01-19 | Show | GitHub Exploit DB Packet Storm |
| 192790 | 6.8 | 警告 | foolabs T1lib |
- | Xpdf などの製品で使用される t1lib における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0764 | 2012-03-27 18:43 | 2011-03-31 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Sept. 24, 2024, 12:15 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1491 | 7.5 |
HIGH
Network
loftware
|
spectrum
|
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
|
NVD-CWE-noinfo
|
CVE-2023-37232
|
2024-09-19 00:55 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1492 | 9.8 |
CRITICAL
Network
moxa
|
oncell_g3470a-lte-eu-t_firmware |
oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-us_firmware
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an ext…
|
CWE-134
|
Use of Externally-Controlled Format String
CVE-2024-4641
|
2024-09-19 00:52 |
2024-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1493 | 8.2 |
HIGH
Network
moxa
|
oncell_g3470a-lte-eu-t_firmware |
oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-us_firmware
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allo…
|
CWE-120
|
Classic Buffer Overflow
CVE-2024-4640
|
2024-09-19 00:48 |
2024-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1494 | 8.8 |
HIGH
Network |
inspireui | mstore_api | The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function i… |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2024-8242 | 2024-09-19 00:47 | 2024-09-14 | Show | GitHub Exploit DB Packet Storm |
| 1495 | 8.8 |
HIGH
Network |
moxa |
oncell_g3470a-lte-eu-t_firmware oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-us_firmware |
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended comman… |
CWE-77
Command Injection |
CVE-2024-4639 | 2024-09-19 00:46 | 2024-06-25 | Show | GitHub Exploit DB Packet Storm |
| 1496 | 9.1 |
CRITICAL
Network
siemens
|
simatic_rf360r_firmware | simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-noinfo
|
CVE-2024-37995
|
2024-09-19 00:37 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1497 | 7.1 |
HIGH
Network |
siemens |
simatic_rf360r_firmware simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-Other
|
CVE-2024-37994
|
2024-09-19 00:35 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1498 | 4.8 |
MEDIUM
Network |
classcms | classcms | A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handle… |
CWE-79
Cross-site Scripting |
CVE-2024-8145 | 2024-09-19 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 1499 | 7.5 |
HIGH
Network
siemens
|
simatic_rf360r_firmware | simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-noinfo
|
CVE-2024-37993
|
2024-09-19 00:32 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1500 | 7.5 |
HIGH
Network
siemens
|
simatic_rf360r_firmware | simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-noinfo
|
CVE-2024-37992
|
2024-09-19 00:31 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|