Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 23, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193121 4.3 警告 avatic - Aardvark Topsites PHP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4097 2012-03-27 18:42 2010-10-27 Show GitHub Exploit DB Packet Storm
193122 4.6 警告 monkeysphere project - Monkeysphere の share/ma/keys_for_user における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4096 2012-03-27 18:42 2010-10-27 Show GitHub Exploit DB Packet Storm
193123 9.3 危険 robo-ftp - Robo-FTP に組み込まれている Serengeti Systems の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4095 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
193124 5 警告 IBM - IBM Rational Quality Manager および Rational Test Lab Manager の Tomcat サーバにおける任意のコードを実行される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-4094 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
193125 1.9 注意 Linux - Linux kernel の sisfb_ioctl 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4078 2012-03-27 18:42 2010-11-29 Show GitHub Exploit DB Packet Storm
193126 1.9 注意 Linux - Linux kernel の rs_ioctl 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4076 2012-03-27 18:42 2010-11-29 Show GitHub Exploit DB Packet Storm
193127 10 危険 IBM - IBM IDS の librpc.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4070 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
193128 8.5 危険 IBM - IBM IDS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4069 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
193129 4.9 警告 TYPO3 Association - TYPO3 の Extension Manager における任意のファイルを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4068 2012-03-27 18:42 2010-10-6 Show GitHub Exploit DB Packet Storm
193130 5 警告 IBM - IBM solidDB の solid.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-4057 2012-03-27 18:42 2010-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1661 7.5 HIGH
Network 		etictelecom remote_access_server_firmware All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vulnerable to directory traversal through several different methods. This could a… CWE-22
Path Traversal 		CVE-2022-41607 2024-09-17 05:15 2022-11-11 Show GitHub Exploit DB Packet Storm
1662 9.8 CRITICAL
Network 		activity_log_project activity_log CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2022-27858 2024-09-17 05:15 2022-11-9 Show GitHub Exploit DB Packet Storm
1663 9.8 CRITICAL
Network 		miniorange oauth_2.0_client_for_sso Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin <= 1.11.3 at WordPress. CWE-306
Missing Authentication for Critical Function 		CVE-2022-34858 2024-09-17 05:15 2022-08-23 Show GitHub Exploit DB Packet Storm
1664 9.8 CRITICAL
Network 		miniorange wp_oauth_server Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2022-34149 2024-09-17 05:15 2022-08-23 Show GitHub Exploit DB Packet Storm
1665 4.8 MEDIUM
Network 		ninjaforms ninja_forms Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label". CWE-79
Cross-site Scripting 		CVE-2021-36827 2024-09-17 05:15 2022-06-17 Show GitHub Exploit DB Packet Storm
1666 6.1 MEDIUM
Network 		wpchill kb_support Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions. CWE-79
Cross-site Scripting 		CVE-2022-27852 2024-09-17 05:15 2022-04-16 Show GitHub Exploit DB Packet Storm
1667 7.5 HIGH
Network 		mongodb mongodb It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If a… CWE-787
 Out-of-bounds Write 		CVE-2021-32040 2024-09-17 05:15 2022-04-13 Show GitHub Exploit DB Packet Storm
1668 4.8 MEDIUM
Network 		ampforwp accelerated_mobile_pages Multiple Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin (versions <= 1.0.77.32). CWE-79
Cross-site Scripting 		CVE-2021-23209 2024-09-17 05:15 2022-03-19 Show GitHub Exploit DB Packet Storm
1669 4.3 MEDIUM
Network 		solarwinds orion_platform It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2021-35248 2024-09-17 05:15 2021-12-21 Show GitHub Exploit DB Packet Storm
1670 9.6 CRITICAL
Adjacent 		pardus liderahenk On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP crede… CWE-306
Missing Authentication for Critical Function 		CVE-2021-3825 2024-09-17 05:15 2021-10-2 Show GitHub Exploit DB Packet Storm