Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193281 4.3 警告 AlstraSoft - AlstraSoft SMS Text Messaging Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4079 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193282 4.3 警告 AlstraSoft - AlstraSoft Text Ads Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4078 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193283 4.3 警告 AlstraSoft - AlstraSoft Video Share Enterprise におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4077 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193284 7.5 危険 ASP indir - Alisveris Sitesi Scripti の index.asp における SQL インジェクションの脆弱性 - CVE-2007-4076 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193285 4.3 警告 ASP indir - Alisveris Sitesi Scripti の index.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4075 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193286 10 危険 SUSE
centre for speech technology research
- Gentoo Linux などの CSTR Festival のディフォルト設定における任意のコマンドを実行される脆弱性 CWE-16
環境設定
CVE-2007-4074 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193287 9.3 危険 clever components - Clever Internet ActiveX Suite の CLINETSUITEX6.OCX の clInetSuiteX6.clWebDav ActiveX コントロールにおける絶対パストラバーサルの脆弱性 - CVE-2007-4067 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
193288 4.3 警告 Drupal - Drupal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4064 2012-06-26 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
193289 4.3 警告 Drupal - Drupal におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4063 2012-06-26 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
193290 9 危険 frank yaul - Frank Yaul corehttp の http.c の HttpSprockMake 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-4060 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 5:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2231 5.4 MEDIUM
Network
bdthemes element_pack The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip' paramet… CWE-79
Cross-site Scripting
CVE-2024-9657 2024-11-9 01:00 2024-11-5 Show GitHub Exploit DB Packet Storm
2232 4.3 MEDIUM
Network
g5plus ultimate_bootstrap_elements_for_elementor The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' functio… NVD-CWE-noinfo
CVE-2024-10329 2024-11-9 00:59 2024-11-5 Show GitHub Exploit DB Packet Storm
2233 7.3 HIGH
Network
tickera tickera The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.5.4.4. This is due to the software allowing users t… CWE-94
Code Injection
CVE-2024-10263 2024-11-9 00:59 2024-11-5 Show GitHub Exploit DB Packet Storm
2234 9.8 CRITICAL
Network
widgilabs plugin_propagator Unrestricted Upload of File with Dangerous Type vulnerability in WidgiLabs Plugin Propagator allows Upload a Web Shell to a Web Server.This issue affects Plugin Propagator: from n/a through 0.1. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-50495 2024-11-9 00:58 2024-10-29 Show GitHub Exploit DB Packet Storm
2235 4.3 MEDIUM
Network
themeum wp_crowdfunding Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10. CWE-862
 Missing Authorization
CVE-2024-43937 2024-11-9 00:57 2024-11-2 Show GitHub Exploit DB Packet Storm
2236 5.3 MEDIUM
Network
combodo itop Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displ… CWE-203
 Information Exposure Through Discrepancy
CVE-2024-51739 2024-11-9 00:56 2024-11-6 Show GitHub Exploit DB Packet Storm
2237 4.1 MEDIUM
Network
nvidia nvidia_container_toolkit
nvidia_gpu_operator
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name … NVD-CWE-Other
CVE-2024-0134 2024-11-9 00:53 2024-11-6 Show GitHub Exploit DB Packet Storm
2238 6.1 MEDIUM
Network
hashicorp consul A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and … CWE-79
Cross-site Scripting
CVE-2024-10086 2024-11-9 00:49 2024-10-31 Show GitHub Exploit DB Packet Storm
2239 10.0 CRITICAL
Network
webandprint ar Unrestricted Upload of File with Dangerous Type vulnerability in Web and Print Design AR For WordPress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-50496 2024-11-9 00:49 2024-10-29 Show GitHub Exploit DB Packet Storm
2240 4.3 MEDIUM
Network
hcltech connections HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entit… NVD-CWE-noinfo
CVE-2024-30106 2024-11-9 00:43 2024-10-29 Show GitHub Exploit DB Packet Storm