Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196311 6.5 警告 オラクル - Oracle Database Server の Core RDBMS コンポーネントにおける権限作成の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0838 2011-07-29 10:53 2011-07-19 Show GitHub Exploit DB Packet Storm
196312 6.5 警告 オラクル - Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0835 2011-07-29 10:53 2011-07-19 Show GitHub Exploit DB Packet Storm
196313 6 警告 オラクル - Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0832 2011-07-29 10:52 2011-07-19 Show GitHub Exploit DB Packet Storm
196314 6.8 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2257 2011-07-29 10:51 2011-07-19 Show GitHub Exploit DB Packet Storm
196315 6.8 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2248 2011-07-29 10:50 2011-07-19 Show GitHub Exploit DB Packet Storm
196316 9.3 危険 アップル
Google		 - Google Chrome にて使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1823 2011-07-29 09:14 2010-09-14 Show GitHub Exploit DB Packet Storm
196317 4.3 警告 アップル - Apple iOS の generate-id XPath 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-0195 2011-07-29 09:10 2011-04-15 Show GitHub Exploit DB Packet Storm
196318 7.6 危険 アップル - Windows 上で稼動する Apple iTunes の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0164 2011-07-29 09:08 2011-03-3 Show GitHub Exploit DB Packet Storm
196319 5.8 警告 アップル - Apple iOS の WebKit における Mail のリモートイメージの読み込み設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3829 2011-07-29 09:06 2010-11-26 Show GitHub Exploit DB Packet Storm
196320 2.6 注意 Mozilla Foundation - Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2011-07-28 12:05 2011-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 22, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1691 6.1 MEDIUM
Network 		solarwinds solarwinds_platform Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0). CWE-79
Cross-site Scripting 		CVE-2022-36965 2024-09-17 03:15 2022-10-1 Show GitHub Exploit DB Packet Storm
1692 8.8 HIGH
Network 		aioseo all_in_one_seo Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress. CWE-352
 Origin Validation Error 		CVE-2022-38093 2024-09-17 03:15 2022-09-10 Show GitHub Exploit DB Packet Storm
1693 7.3 HIGH
Local 		miele benchmark_programming_tool In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2022-22521 2024-09-17 03:15 2022-04-28 Show GitHub Exploit DB Packet Storm
1694 5.4 MEDIUM
Network 		wp-downloadmanager_project wp-downloadmanager Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions. CWE-79
Cross-site Scripting 		CVE-2021-44760 2024-09-17 03:15 2022-03-19 Show GitHub Exploit DB Packet Storm
1695 4.8 MEDIUM
Network 		ampforwp accelerated_mobile_pages Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 versions. CWE-79
Cross-site Scripting 		CVE-2021-23150 2024-09-17 03:15 2022-03-19 Show GitHub Exploit DB Packet Storm
1696 6.5 MEDIUM
Network 		mongodb mongodb An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This… CWE-20
 Improper Input Validation  		CVE-2021-20330 2024-09-17 03:15 2021-12-15 Show GitHub Exploit DB Packet Storm
1697 8.2 HIGH
Network 		cusmin absolutely_glamorous_custom_admin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cusmin AGCA - Absolutely Glamorous Custom Admin (WordPress plugin) allows Stored XSS.This issue a… CWE-79
Cross-site Scripting 		CVE-2021-36823 2024-09-17 03:15 2021-09-24 Show GitHub Exploit DB Packet Storm
1698 6.5 MEDIUM
Network 		mongodb mongodb A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB … CWE-190
 Integer Overflow or Wraparound 		CVE-2019-2392 2024-09-17 03:15 2020-11-24 Show GitHub Exploit DB Packet Storm
1699 8.1 HIGH
Network 		dell powermax_os
emc_unisphere_for_powermax_virtual_appliance
emc_unisphere_for_powermax 		Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an improper certificate … CWE-295
Improper Certificate Validation  		CVE-2020-5367 2024-09-17 03:15 2020-06-24 Show GitHub Exploit DB Packet Storm
1700 8.8 HIGH
Network 		solarwinds access_rights_manager SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, r… NVD-CWE-noinfo
CVE-2024-28991 2024-09-17 03:06 2024-09-12 Show GitHub Exploit DB Packet Storm