Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 11, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194851 4.3 警告 IBM - IBM OmniFind におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3890 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
194852 1.9 注意 Linux - Linux kernel の ax25_getname 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3875 2012-03-27 18:42 2011-01-3 Show GitHub Exploit DB Packet Storm
194853 7.8 危険 Linux - Linux kernel の X.25 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3873 2012-03-27 18:42 2011-01-3 Show GitHub Exploit DB Packet Storm
194854 7.2 危険 マイクロソフト - Microsoft Windows の 32 ビットプラットフォームにおける権限昇格の脆弱性 CWE-noinfo
情報不足
CVE-2010-3889 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
194855 7.2 危険 マイクロソフト - Microsoft Windows の 32 ビットプラットフォームにおける権限昇格の脆弱性 CWE-noinfo
情報不足
CVE-2010-3888 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
194856 4.3 警告 アップル - Apple の Mac OS X の Limit Mail 機能におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3887 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
194857 4.3 警告 マイクロソフト - Microsoft mshtml.dll の sertIntoTimeoutList 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3886 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
194858 6.8 警告 CMS Made Simple - CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3884 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
194859 6.8 警告 CMS Made Simple - CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3883 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
194860 4.3 警告 CMS Made Simple - CMS Made Simple におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3882 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 10, 2024, 8:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 9.8 CRITICAL
Network
dlink dir-860l_firmware In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can caus… Update CWE-120
Classic Buffer Overflow
CVE-2024-42812 2024-10-11 05:18 2024-08-20 Show GitHub Exploit DB Packet Storm
192 - - - A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file sort2_user.php. The manipu… New CWE-79
Cross-site Scripting
CVE-2024-9810 2024-10-11 05:15 2024-10-11 Show GitHub Exploit DB Packet Storm
193 - - - A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function delete_product of the file /classes/Master.php?f=… New CWE-89
SQL Injection
CVE-2024-9809 2024-10-11 05:15 2024-10-11 Show GitHub Exploit DB Packet Storm
194 - - - A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/view_product. The manipulati… New CWE-89
SQL Injection
CVE-2024-9808 2024-10-11 05:15 2024-10-11 Show GitHub Exploit DB Packet Storm
195 4.9 MEDIUM
Network
litellm litellm A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to the improper handling of the 'user_id' p… Update CWE-89
SQL Injection
CVE-2024-4890 2024-10-11 05:11 2024-06-7 Show GitHub Exploit DB Packet Storm
196 7.5 HIGH
Network
codehaus-plexus
redhat
plexus-utils
integration_camel_k
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with … Update CWE-22
Path Traversal
CVE-2022-4244 2024-10-11 05:04 2023-09-26 Show GitHub Exploit DB Packet Storm
197 4.3 MEDIUM
Network
codehaus-plexus
redhat
plexus-utils
integration_camel_k
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command str… Update CWE-611
XXE
CVE-2022-4245 2024-10-11 05:02 2023-09-26 Show GitHub Exploit DB Packet Storm
198 7.5 HIGH
Network
thekelleys dnsmasq dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Update CWE-190
 Integer Overflow or Wraparound
CVE-2023-49441 2024-10-11 05:00 2024-06-7 Show GitHub Exploit DB Packet Storm
199 9.8 CRITICAL
Network
codehaus-plexus
debian
plexus-utils
debian_linux
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. Update CWE-78
OS Command 
CVE-2017-1000487 2024-10-11 04:55 2018-01-4 Show GitHub Exploit DB Packet Storm
200 - - - A vulnerability was found in Craig Rodway Classroombookings 2.8.7 and classified as problematic. This issue affects some unknown processing of the file /sessions of the component Session Page. The ma… New - CVE-2024-9807 2024-10-11 04:15 2024-10-11 Show GitHub Exploit DB Packet Storm