Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193131 5 警告 IBM - IBM solidDB の solid.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-4056 2012-03-27 18:42 2010-10-15 Show GitHub Exploit DB Packet Storm
193132 5 警告 IBM - IBM solidDB の solid.exe におけるサービス運用妨害 (DoS) 脆弱性 CWE-399
リソース管理の問題
CVE-2010-4055 2012-03-27 18:42 2010-10-15 Show GitHub Exploit DB Packet Storm
193133 9 危険 IBM - IBM IDS のログを取得する機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4053 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
193134 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-4050 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
193135 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4049 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
193136 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4048 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
193137 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4047 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
193138 4.3 警告 Opera Software ASA - Opera における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4046 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
193139 9.3 危険 Opera Software ASA - Opera におけるアドレスバーを偽造される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4045 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
193140 4.3 警告 Opera Software ASA - Opera におけるURLを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2010-4044 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2131 6.1 MEDIUM
Network
payara payara URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from … CWE-601
Open Redirect
CVE-2024-7312 2024-09-14 01:27 2024-09-12 Show GitHub Exploit DB Packet Storm
2132 8.8 HIGH
Network
code-projects inventory_management A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerability is an unknown functionality of the file /model/viewProduct.php of the compon… CWE-89
SQL Injection
CVE-2024-8710 2024-09-14 01:25 2024-09-12 Show GitHub Exploit DB Packet Storm
2133 7.5 HIGH
Network
oretnom23 food_ordering_management_system A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/… NVD-CWE-Other
CVE-2024-8711 2024-09-14 01:18 2024-09-12 Show GitHub Exploit DB Packet Storm
2134 6.1 MEDIUM
Network
scriptonite music_request_manager The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin ad… CWE-352
 Origin Validation Error
CVE-2024-6017 2024-09-14 01:17 2024-09-12 Show GitHub Exploit DB Packet Storm
2135 6.1 MEDIUM
Network
scriptonite music_request_manager The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Script… CWE-79
Cross-site Scripting
CVE-2024-6018 2024-09-14 01:15 2024-09-12 Show GitHub Exploit DB Packet Storm
2136 - - - Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function. - CVE-2023-46951 2024-09-14 01:15 2024-03-1 Show GitHub Exploit DB Packet Storm
2137 6.1 MEDIUM
Network
scriptonite music_request_manager The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against ad… CWE-79
Cross-site Scripting
CVE-2024-6019 2024-09-14 01:13 2024-09-12 Show GitHub Exploit DB Packet Storm
2138 7.5 HIGH
Network
thimpress learnpress The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up … CWE-89
SQL Injection
CVE-2024-8522 2024-09-14 01:12 2024-09-12 Show GitHub Exploit DB Packet Storm
2139 7.5 HIGH
Network
thimpress learnpress The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions u… CWE-89
SQL Injection
CVE-2024-8529 2024-09-14 01:11 2024-09-12 Show GitHub Exploit DB Packet Storm
2140 4.8 MEDIUM
Network
pega infinity Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. CWE-79
Cross-site Scripting
CVE-2024-6700 2024-09-14 01:09 2024-09-13 Show GitHub Exploit DB Packet Storm