Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 23, 2024, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193781 7.5 危険 Dotclear - Dotclear の inc/swf/swfupload.swf における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5083 2012-03-22 17:15 2012-03-19 Show GitHub Exploit DB Packet Storm
193782 4.3 警告 WonderDesk - WonderDesk SQL の wonderdesk.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1788 2012-03-22 16:59 2012-03-19 Show GitHub Exploit DB Packet Storm
193783 4.3 警告 s2Member - WordPress 用 s2Member Pro プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5082 2012-03-22 16:55 2012-03-19 Show GitHub Exploit DB Packet Storm
193784 5 警告 Bitweaver - Bitweaver の wiki/rankings.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-5086 2012-03-22 16:54 2012-03-19 Show GitHub Exploit DB Packet Storm
193785 4.3 警告 Webglimpse - Webglimpse の wgarcmin.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1787 2012-03-22 16:48 2012-03-19 Show GitHub Exploit DB Packet Storm
193786 5 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-5114 2012-03-22 16:41 2012-03-19 Show GitHub Exploit DB Packet Storm
193787 4.3 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-5113 2012-03-22 16:40 2012-03-19 Show GitHub Exploit DB Packet Storm
193788 5 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2009-5112 2012-03-22 16:39 2012-03-19 Show GitHub Exploit DB Packet Storm
193789 4.3 警告 OSQA - OSQA の questions/ask におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1782 2012-03-22 16:33 2012-03-19 Show GitHub Exploit DB Packet Storm
193790 4.3 警告 Dotclear - Dotclear におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1039 2012-03-22 16:18 2012-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 4:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1571 7.0 HIGH
Local
oracle solaris Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged att… NVD-CWE-noinfo
CVE-2023-21896 2024-09-17 11:35 2023-04-19 Show GitHub Exploit DB Packet Storm
1572 6.8 MEDIUM
Network
oracle health_sciences_inform Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. … NVD-CWE-noinfo
CVE-2023-21922 2024-09-17 11:35 2023-04-19 Show GitHub Exploit DB Packet Storm
1573 6.1 MEDIUM
Network
oracle banking_virtual_account_management Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Routing Hub). Supported versions that are affected are 14.5, 14.6 and 14… NVD-CWE-noinfo
CVE-2023-21905 2024-09-17 11:35 2023-04-19 Show GitHub Exploit DB Packet Storm
1574 6.3 MEDIUM
Adjacent
oracle mysql_cluster Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations). Supported versions that are affected are 7.4.38 and prior, 7.5.28 and prior, 7.6.24 and prior an… NVD-CWE-noinfo
CVE-2023-21860 2024-09-17 11:35 2023-01-18 Show GitHub Exploit DB Packet Storm
1575 7.3 HIGH
Local
oracle global_lifecycle_management_nextgen_oui_framework Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer issues). Supported versions that are affected are Prio… NVD-CWE-noinfo
CVE-2023-21894 2024-09-17 11:35 2023-01-18 Show GitHub Exploit DB Packet Storm
1576 8.1 HIGH
Network
dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentia… CWE-798
 Use of Hard-coded Credentials
CVE-2024-39585 2024-09-17 11:15 2024-09-6 Show GitHub Exploit DB Packet Storm
1577 5.4 MEDIUM
Network
cyberchimps ifeature_slider Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in iFeature Slider plugin <= 1.2 on WordPress. CWE-79
Cross-site Scripting
CVE-2022-45375 2024-09-17 11:15 2022-11-18 Show GitHub Exploit DB Packet Storm
1578 7.5 HIGH
Network
device42 cmdb Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker to read sensitive server files with roo… CWE-863
 Incorrect Authorization
CVE-2022-1401 2024-09-17 11:15 2022-08-17 Show GitHub Exploit DB Packet Storm
1579 9.8 CRITICAL
Network
dell
oracle
bsafe_crypto-c-micro-edition
bsafe_micro-edition-suite
http_server
security_service
database
weblogic_server_proxy_plug-in
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability. NVD-CWE-Other
CVE-2020-35166 2024-09-17 11:15 2022-07-12 Show GitHub Exploit DB Packet Storm
1580 8.8 HIGH
Network
admin_management_xtended_project admin_management_xtended Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Admin Management Xtended plugin <= 2.4.4 at WordPress. CWE-352
 Origin Validation Error
CVE-2022-29450 2024-09-17 11:15 2022-06-16 Show GitHub Exploit DB Packet Storm