Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 23, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195951 6.8 警告 FFmpeg
Libav		 - FFmpeg および libav の decode_residual_block 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3362 2011-10-7 10:58 2011-10-2 Show GitHub Exploit DB Packet Storm
195952 - - Investintech.com Inc. - SlimPDF Reader に複数の脆弱性 - - 2011-10-7 10:56 2011-10-4 Show GitHub Exploit DB Packet Storm
195953 10 危険 Mozilla Foundation - Mozilla Firefox のプラグイン API におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2996 2011-10-5 16:27 2011-09-27 Show GitHub Exploit DB Packet Storm
195954 9.3 危険 FFmpeg - FFmpeg の Matroska フォーマットデコーダにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3504 2011-10-5 16:26 2011-09-29 Show GitHub Exploit DB Packet Storm
195955 4.3 警告 Wibu-Systems AG - Wibu-Systems CodeMeter WebAdmin の Licenses.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3689 2011-10-4 10:29 2011-09-27 Show GitHub Exploit DB Packet Storm
195956 5 警告 NetSaro - NetSaro Enterprise Messenger Server におけるアプリケーションのソースコードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-3694 2011-10-4 10:28 2011-09-27 Show GitHub Exploit DB Packet Storm
195957 1.9 注意 NetSaro - NetSaro Enterprise Messenger Server における平文のサーバ資格情報を発見される脆弱性 CWE-310
暗号の問題 		CVE-2011-3693 2011-10-4 10:25 2011-09-27 Show GitHub Exploit DB Packet Storm
195958 1.9 注意 NetSaro - NetSaro Enterprise Messenger Server における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3692 2011-10-4 10:06 2011-09-27 Show GitHub Exploit DB Packet Storm
195959 6.9 警告 Foxit Software Inc - Foxit Reader における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3691 2011-10-4 10:01 2011-09-27 Show GitHub Exploit DB Packet Storm
195960 6.9 警告 PlotSoft L.L.C. - PlotSoft PDFill PDF Editor における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3690 2011-10-4 10:00 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 - - - Local active protection service settings manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows, macOS) before build 38… New CWE-250
 Execution with Unnecessary Privileges 		CVE-2024-8903 2024-09-23 18:15 2024-09-23 Show GitHub Exploit DB Packet Storm
2 - - - Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to … New - CVE-2024-45348 2024-09-23 18:15 2024-09-23 Show GitHub Exploit DB Packet Storm
3 7.5 HIGH
Network 		vidco voc_tester Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vidco Software VOC TESTER allows Path Traversal.This issue affects VOC TESTER: before 12.34.8. Update CWE-22
Path Traversal 		CVE-2024-7609 2024-09-23 18:15 2024-09-11 Show GitHub Exploit DB Packet Storm
4 9.8 CRITICAL
Network 		profelis passbox Improper Authentication, Missing Authentication for Critical Function, Improper Authorization vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affec… Update CWE-287
CWE-306
CWE-285
Improper Authentication
Missing Authentication for Critical Function
Improper Authorization 		CVE-2024-7015 2024-09-23 18:15 2024-09-9 Show GitHub Exploit DB Packet Storm
5 - - - Bypass of two factor authentication in RestAPI in Checkmk < 2.3.0p16 and < 2.2.0p34 allows authenticated users to bypass two factor authentication New - CVE-2024-8606 2024-09-23 16:15 2024-09-23 Show GitHub Exploit DB Packet Storm
6 - - - The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc… New - CVE-2024-8758 2024-09-23 15:15 2024-09-23 Show GitHub Exploit DB Packet Storm
7 - - - YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbi… New - CVE-2024-7846 2024-09-23 15:15 2024-09-23 Show GitHub Exploit DB Packet Storm
8 - - - iRedAdmin before 2.6 allows XSS, e.g., via order_name. New - CVE-2024-47227 2024-09-23 13:15 2024-09-23 Show GitHub Exploit DB Packet Storm
9 - - - A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/update/o-.php. The manipulation of the argume… New CWE-89
SQL Injection 		CVE-2024-9094 2024-09-23 11:15 2024-09-23 Show GitHub Exploit DB Packet Storm
10 - - - A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the file del.php of the component GET Paramete… New CWE-89
SQL Injection 		CVE-2024-9093 2024-09-23 10:15 2024-09-23 Show GitHub Exploit DB Packet Storm