Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193001 5 警告 helpcenterlive - HelpCenter Live における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3742 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193002 5 警告 Ganglia - Ganglia における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3741 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193003 5 警告 FrontAccounting - FrontAccounting における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3740 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193004 5 警告 openfreeway - Freeway における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3739 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193005 5 警告 Feng Office - Feng Office における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3738 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193006 5 警告 eyeOS Project - eyeOS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3737 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193007 5 警告 exoscripts - ExoPHPDesk における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3736 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193008 5 警告 escortwebsitedesign - Escort Agency CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3735 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193009 5 警告 energine - Energine における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3734 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
193010 5 警告 Elgg - Elgg における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3733 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 6, 2024, 5:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1991 8.8 HIGH
Network 		hfo4 shudong-share A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the compon… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-8338 2024-09-26 04:12 2024-08-31 Show GitHub Exploit DB Packet Storm
1992 5.3 MEDIUM
Network 		getastra wp_hardening The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular ex… CWE-697
 Incorrect Comparison 		CVE-2024-6641 2024-09-26 04:07 2024-09-18 Show GitHub Exploit DB Packet Storm
1993 6.1 MEDIUM
Network 		svelte svelte svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svelte improperly escapes HTML on server-side rendering. The as… CWE-79
Cross-site Scripting 		CVE-2024-45047 2024-09-26 04:06 2024-08-31 Show GitHub Exploit DB Packet Storm
1994 6.1 MEDIUM
Network 		elizsoftware panel Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24. CWE-79
Cross-site Scripting 		CVE-2024-6877 2024-09-26 03:57 2024-09-19 Show GitHub Exploit DB Packet Storm
1995 6.2 MEDIUM
Local 		redhat libvirt A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointe… CWE-476
 NULL Pointer Dereference 		CVE-2024-8235 2024-09-26 03:56 2024-08-31 Show GitHub Exploit DB Packet Storm
1996 9.8 CRITICAL
Network 		elizsoftware panel Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24. CWE-256
Plaintext Storage of a Password  		CVE-2024-5960 2024-09-26 03:55 2024-09-19 Show GitHub Exploit DB Packet Storm
1997 5.3 MEDIUM
Network 		felixmoira limit_login_attempts_plus The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1.0. This is due to insufficient restrictions on where the IP Address infor… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2022-4533 2024-09-26 03:53 2024-09-19 Show GitHub Exploit DB Packet Storm
1998 6.1 MEDIUM
Network 		ibericode mailchimp The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder such as {email} is used for the field in versions … CWE-79
Cross-site Scripting 		CVE-2024-8850 2024-09-26 03:49 2024-09-19 Show GitHub Exploit DB Packet Storm
1999 8.8 HIGH
Network 		jeanmarc77 123solar A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file config/config_invt1.php. The manipulation of … CWE-94
Code Injection 		CVE-2024-9006 2024-09-26 03:44 2024-09-20 Show GitHub Exploit DB Packet Storm
2000 5.4 MEDIUM
Network 		jeanmarc77 123solar A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross … CWE-79
Cross-site Scripting 		CVE-2024-9007 2024-09-26 03:40 2024-09-20 Show GitHub Exploit DB Packet Storm