Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 26, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195981 5 警告 Google - Linux 上で動作する Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1436 2011-11-18 09:56 2011-04-27 Show GitHub Exploit DB Packet Storm
195982 5 警告 Google - Google Chrome におけるローカルファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1435 2011-11-18 09:56 2011-04-27 Show GitHub Exploit DB Packet Storm
195983 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1434 2011-11-18 09:55 2011-04-27 Show GitHub Exploit DB Packet Storm
195984 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2011-1305 2011-11-18 09:54 2011-04-27 Show GitHub Exploit DB Packet Storm
195985 5 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2011-1304 2011-11-18 09:54 2011-04-27 Show GitHub Exploit DB Packet Storm
195986 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1303 2011-11-18 09:53 2011-04-27 Show GitHub Exploit DB Packet Storm
195987 4.3 警告 サイバートラスト株式会社
Trolltech
ターボリナックス
レッドハット		 - Qt の UTF-8 デコーダーにおけるクロスサイトスクリプティングおよびディレクトリトラバーサルの脆弱性 - CVE-2007-0242 2011-11-17 11:10 2007-04-3 Show GitHub Exploit DB Packet Storm
195988 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0069 2011-11-17 11:04 2011-04-28 Show GitHub Exploit DB Packet Storm
195989 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0070 2011-11-17 11:03 2011-04-28 Show GitHub Exploit DB Packet Storm
195990 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0072 2011-11-17 11:02 2011-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 27, 2024, 5:55 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 - - - The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, t… New - CVE-2024-6845 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
202 6.4 MEDIUM
Network 		- - The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tooltip… New CWE-79
Cross-site Scripting 		CVE-2024-8668 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
203 9.8 CRITICAL
Network 		- - The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function in all versions up to, and including, 6.6.4 due to insuffi… New CWE-89
SQL Injection 		CVE-2024-8275 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
204 4.3 MEDIUM
Network 		- - The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render() function. This makes it possible for authen… New - CVE-2024-8516 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
205 6.4 MEDIUM
Network 		- - The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like 'TF E Slider Widget', 'TF Video Widget', 'TF Team Widget' and more in al… New CWE-79
Cross-site Scripting 		CVE-2024-8515 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
206 9.1 CRITICAL
Network 		- - The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'pri… New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-8514 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
207 9.1 CRITICAL
Network 		- - The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user supplie… New - CVE-2024-7385 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
208 6.4 MEDIUM
Network 		- - The GutenGeek Free Gutenberg Blocks for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.3 due to insufficien… New CWE-79
Cross-site Scripting 		CVE-2024-9073 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
209 - - - The Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SV… New CWE-79
Cross-site Scripting 		CVE-2024-9069 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
210 6.4 MEDIUM
Network 		- - The OneElements – Best Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.7 due to insufficient input sa… New CWE-79
Cross-site Scripting 		CVE-2024-9068 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm