Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 9, 2024, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195011	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2779	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

195012	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2778	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

195013	9	危険	Novell	-	Novell GroupWise の IMAP サーバコンポーネントにおけるスタックペースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2777	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

195014	6.9	警告	Linux	-	Linux kernel の hvc_close 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-2653	2012-03-27 18:42	2010-10-5	Show	GitHub Exploit DB Packet Storm

195015	5	警告	IBM	-	IBM WSRR における管理統制操作を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2644	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

195016	5	警告	IBM	-	IBM WebSphere Commerce Enterprise における他人のメッセージを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-2639	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

195017	4	警告	IBM	-	IBM WebSphere におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2638	2012-03-27 18:42	2010-11-15	Show	GitHub Exploit DB Packet Storm

195018	4.3	警告	IBM	-	IBM WebSphere MQ における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-2637	2012-03-27 18:42	2010-11-12	Show	GitHub Exploit DB Packet Storm

195019	4.3	警告	IBM	-	IBM WebSphere Commerce におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2636	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

195020	6.5	警告	IBM	-	IBM WebSphere Commerce における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2635	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 9, 2024, 8:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
51	8.8	HIGH Network	onthegosystems	woocommerce_multilingual_\&_multicurrency	Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4. Update	CWE-862 Missing Authorization	CVE-2024-30466	2024-10-9 06:04	2024-06-9	Show	GitHub Exploit DB Packet Storm

52	7.5	HIGH Network	cisco	ios_xe	A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) co… Update	CWE-476 NULL Pointer Dereference	CVE-2024-20436	2024-10-9 06:00	2024-09-26	Show	GitHub Exploit DB Packet Storm

53	8.8	HIGH Network	jch_optimize_project	jch_optimize	Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0. Update	NVD-CWE-noinfo	CVE-2024-30481	2024-10-9 05:49	2024-06-9	Show	GitHub Exploit DB Packet Storm

54	8.8	HIGH Network	yithemes	woocommerce_account_funds	Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0. Update	CWE-862 Missing Authorization	CVE-2024-30470	2024-10-9 05:43	2024-06-9	Show	GitHub Exploit DB Packet Storm

55	-		-	-	Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service (DoS). New	-	CVE-2024-46539	2024-10-9 05:35	2024-10-9	Show	GitHub Exploit DB Packet Storm

56	7.5	HIGH Network	jtekt	gc-a22w-cw_firmware gc-a24w-c\(w\)_firmware gc-a26w-c\(w\)_firmware gc-a24_firmware gc-a24-m_firmware gc-a25_firmware gc-a26_firmware gc-a26-j2_firmware gc-a27-c_firmware g…	Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-servic… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2023-49140	2024-10-9 05:35	2023-12-12	Show	GitHub Exploit DB Packet Storm

57	6.8	MEDIUM Adjacent	elecom	wrc-x3000gsn_firmware wrc-x3000gs_firmware wrc-x3000gsa_firmware	OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to… Update	CWE-78 OS Command	CVE-2023-49695	2024-10-9 05:35	2023-12-12	Show	GitHub Exploit DB Packet Storm

58	9.8	CRITICAL Network	elecom	wrc-f1167acf_firmware wrc-1750ghbk_firmware wrc-1167ghbk2_firmware wrc-1750ghbk2-i_firmware wrc-1750ghbk-e_firmware	OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected pro… Update	CWE-78 OS Command	CVE-2023-40069	2024-10-9 05:35	2023-08-18	Show	GitHub Exploit DB Packet Storm

59	9.8	CRITICAL Network	broadcom	raid_controller_web_interface	Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection Update	CWE-330 Use of Insufficiently Random Values	CVE-2023-4344	2024-10-9 05:35	2023-08-16	Show	GitHub Exploit DB Packet Storm

60	8.8	HIGH Network	google fedoraproject debian	chrome fedora debian_linux	Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corrupt… Update	CWE-787 Out-of-bounds Write	CVE-2023-1820	2024-10-9 05:35	2023-04-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed