Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 7, 2024, 10:02 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195231	4.3	警告	Quirm	-	WordPress 用 ZenLite テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3854	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

195232	4.3	警告	ThemeHybrid	-	WordPress 用 Hybrid テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3853	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

195233	4.3	警告	Theme4Press	-	WordPress 用 EvoLve テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3852	2012-03-5 11:03	2011-09-28	Show	GitHub Exploit DB Packet Storm

195234	4.3	警告	DevPress	-	WordPress 用 News テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3851	2012-03-5 11:03	2011-09-28	Show	GitHub Exploit DB Packet Storm

195235	4.3	警告	Bytes For All	-	WordPress 用 Atahualpa テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3850	2012-03-5 11:02	2011-09-28	Show	GitHub Exploit DB Packet Storm

195236	5.1	警告	Mozilla Foundation	-	Bugzilla の xmlrpc.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0453	2012-03-2 15:18	2012-02-9	Show	GitHub Exploit DB Packet Storm

195237	9.3	危険	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおける設定を読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0371	2012-03-2 15:04	2012-02-29	Show	GitHub Exploit DB Packet Storm

195238	7.8	危険	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0370	2012-03-2 15:03	2012-02-29	Show	GitHub Exploit DB Packet Storm

195239	7.8	危険	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0369	2012-03-2 15:02	2012-02-29	Show	GitHub Exploit DB Packet Storm

195240	7.8	危険	シスコシステムズ	-	Cisco Unity Connection におけるサービス運用妨害 (サービスクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0367	2012-03-2 14:25	2012-02-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 7, 2024, 5:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
721	5.4	MEDIUM Network	cisco	catalyst_sd-wan_manager	A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a cross-site scripting …	CWE-79 Cross-site Scripting	CVE-2024-20475	2024-10-4 02:49	2024-09-26	Show	GitHub Exploit DB Packet Storm

722	8.0	HIGH Adjacent	autel	maxicharger_ac_elite_business_c50_firmware	Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra…	CWE-787 Out-of-bounds Write	CVE-2024-23959	2024-10-4 02:42	2024-09-28	Show	GitHub Exploit DB Packet Storm

723	8.8	HIGH Adjacent	autel	maxicharger_ac_elite_business_c50_firmware	Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected instal…	CWE-798 Use of Hard-coded Credentials	CVE-2024-23958	2024-10-4 02:42	2024-09-28	Show	GitHub Exploit DB Packet Storm

724	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attem…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2024-44969	2024-10-4 02:38	2024-09-5	Show	GitHub Exploit DB Packet Storm

725	8.0	HIGH Adjacent	autel	maxicharger_ac_elite_business_c50_firmware	Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbi…	CWE-787 Out-of-bounds Write	CVE-2024-23967	2024-10-4 02:37	2024-09-28	Show	GitHub Exploit DB Packet Storm

726	8.8	HIGH Adjacent	autel	maxicharger_ac_elite_business_c50_firmware	Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary co…	CWE-787 Out-of-bounds Write	CVE-2024-23957	2024-10-4 02:37	2024-09-28	Show	GitHub Exploit DB Packet Storm

727	8.8	HIGH Network	atlassian	confluence_data_center confluence_server jira_service_management jira_data_center jira_server crucible fisheye crowd bitbucket bamboo jira_service_desk	A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlass…	CWE-346 Origin Validation Error	CVE-2022-26137	2024-10-4 02:35	2022-07-21	Show	GitHub Exploit DB Packet Storm

728	5.4	MEDIUM Network	hasthemes	ht_mega	The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as…	CWE-79 Cross-site Scripting	CVE-2021-24261	2024-10-4 02:35	2021-05-6	Show	GitHub Exploit DB Packet Storm

729	9.8	CRITICAL Network	atlassian	confluence_data_center confluence_server jira_service_management jira_data_center jira_server crucible fisheye crowd bitbucket bamboo jira_service_desk	A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by …	CWE-287 Improper Authentication	CVE-2022-26136	2024-10-4 02:35	2022-07-21	Show	GitHub Exploit DB Packet Storm

730	4.3	MEDIUM Network	hasthemes	ht_mega	The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widget…	NVD-CWE-noinfo	CVE-2024-8910	2024-10-4 02:34	2024-09-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed