Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 3, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195901 7.5 危険 Wuzly - Wuzly における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3838 2011-12-28 11:31 2011-12-24 Show GitHub Exploit DB Packet Storm
195902 6.8 警告 Wuzly - Wuzly の blog_system/data_functions.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3837 2011-12-28 11:30 2011-12-24 Show GitHub Exploit DB Packet Storm
195903 4.3 警告 Wuzly - Wuzly におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3836 2011-12-28 11:30 2011-12-24 Show GitHub Exploit DB Packet Storm
195904 4.3 警告 Wuzly - Wuzly におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3835 2011-12-28 11:29 2011-12-24 Show GitHub Exploit DB Packet Storm
195905 7.5 危険 Carnegie Mellon University (Project Cyrus)
レッドハット		 - Cyrus IMAPd の NNTP サーバ (nntpd) 内の imap/nntpd.c における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-3372 2011-12-28 11:12 2011-12-24 Show GitHub Exploit DB Packet Storm
195906 6 警告 OpenStack - OpenStack Compute (Nova) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4596 2011-12-28 11:08 2011-12-23 Show GitHub Exploit DB Packet Storm
195907 9.3 危険 IBM
Blueberry Software		 - Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1388 2011-12-27 16:46 2011-12-23 Show GitHub Exploit DB Packet Storm
195908 9.3 危険 IBM
Blueberry Software		 - Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1391 2011-12-27 16:45 2011-12-23 Show GitHub Exploit DB Packet Storm
195909 9.3 危険 IBM
Blueberry Software		 - Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1392 2011-12-27 16:44 2011-12-23 Show GitHub Exploit DB Packet Storm
195910 4.3 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4897 2011-12-27 11:17 2011-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 3, 2024, 4:11 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
991 6.5 MEDIUM
Network 		wp-property-hive propertyhive The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.19. This is due to missing or incorrect nonce validation on the 'save_accou… CWE-352
 Origin Validation Error 		CVE-2024-8490 2024-09-28 03:36 2024-09-17 Show GitHub Exploit DB Packet Storm
992 4.8 MEDIUM
Network 		majeedraza carousel_slider The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks eve… CWE-79
Cross-site Scripting 		CVE-2024-6850 2024-09-28 03:30 2024-09-13 Show GitHub Exploit DB Packet Storm
993 7.2 HIGH
Network 		nsqua simply_schedule_appointments The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injec… NVD-CWE-Other
CVE-2024-7129 2024-09-28 03:26 2024-09-13 Show GitHub Exploit DB Packet Storm
994 6.5 MEDIUM
Network 		michalaugustyniak misiek_photo_album The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attackers to make logged in users delete arbitrary albums via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-7817 2024-09-28 03:26 2024-09-12 Show GitHub Exploit DB Packet Storm
995 4.8 MEDIUM
Network 		wp-master logo_manager_for_enamad The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scri… CWE-79
Cross-site Scripting 		CVE-2024-5170 2024-09-28 03:23 2024-09-17 Show GitHub Exploit DB Packet Storm
996 5.4 MEDIUM
Network 		seanschulte vikinghammer_tweet The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… CWE-352
 Origin Validation Error 		CVE-2024-8043 2024-09-28 03:22 2024-09-17 Show GitHub Exploit DB Packet Storm
997 5.4 MEDIUM
Network 		moc special_feed_items The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… CWE-352
 Origin Validation Error 		CVE-2024-8051 2024-09-28 03:19 2024-09-17 Show GitHub Exploit DB Packet Storm
998 6.1 MEDIUM
Network 		michalaugustyniak misiek_photo_album The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add… CWE-79
Cross-site Scripting 		CVE-2024-7818 2024-09-28 03:18 2024-09-12 Show GitHub Exploit DB Packet Storm
999 5.4 MEDIUM
Network 		alaingonzalez accordion_image_menu The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… CWE-352
 Origin Validation Error 		CVE-2024-8092 2024-09-28 03:17 2024-09-17 Show GitHub Exploit DB Packet Storm
1000 6.5 MEDIUM
Network 		jakesnyder enhanced_search_box The Enhanced Search Box WordPress plugin through 0.6.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-8091 2024-09-28 03:17 2024-09-17 Show GitHub Exploit DB Packet Storm