Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196321 2.6 注意 Mozilla Foundation - Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2011-07-28 12:04 2011-07-28 Show GitHub Exploit DB Packet Storm
196322 2.6 注意 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
- 2011-07-28 12:04 2011-07-28 Show GitHub Exploit DB Packet Storm
196323 2.6 注意 Mozilla Foundation - Mozilla Firefox における Content-Length ヘッダの処理に関する脆弱性 CWE-DesignError
- 2011-07-28 12:02 2011-07-28 Show GitHub Exploit DB Packet Storm
196324 6.4 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2244 2011-07-28 10:53 2011-07-19 Show GitHub Exploit DB Packet Storm
196325 6.8 警告 オラクル - Oracle Database Server の Content Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0882 2011-07-28 10:53 2011-07-19 Show GitHub Exploit DB Packet Storm
196326 4.3 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0881 2011-07-28 10:52 2011-07-19 Show GitHub Exploit DB Packet Storm
196327 4.3 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0879 2011-07-28 10:51 2011-07-19 Show GitHub Exploit DB Packet Storm
196328 4.3 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0877 2011-07-28 10:50 2011-07-19 Show GitHub Exploit DB Packet Storm
196329 4.3 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0876 2011-07-28 10:37 2011-07-19 Show GitHub Exploit DB Packet Storm
196330 5.5 警告 オラクル - Oracle Database Server の EMCTL コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0875 2011-07-28 10:36 2011-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 22, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1701 5.5 MEDIUM
Local 		adobe indesign InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabi… CWE-125
Out-of-bounds Read 		CVE-2024-34127 2024-09-17 02:48 2024-08-15 Show GitHub Exploit DB Packet Storm
1702 4.6 MEDIUM
Physics 		talyabilisim travel_apps Improper Access Control vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68. NVD-CWE-noinfo
CVE-2024-1153 2024-09-17 02:39 2024-06-27 Show GitHub Exploit DB Packet Storm
1703 8.8 HIGH
Network 		mindsdb mindsdb An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases crea… CWE-94
Code Injection 		CVE-2024-45851 2024-09-17 02:36 2024-09-12 Show GitHub Exploit DB Packet Storm
1704 8.8 HIGH
Network 		mindsdb mindsdb An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases crea… CWE-94
Code Injection 		CVE-2024-45850 2024-09-17 02:35 2024-09-12 Show GitHub Exploit DB Packet Storm
1705 8.8 HIGH
Network 		mindsdb mindsdb An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases crea… CWE-94
Code Injection 		CVE-2024-45849 2024-09-17 02:34 2024-09-12 Show GitHub Exploit DB Packet Storm
1706 8.8 HIGH
Network 		mindsdb mindsdb An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT… CWE-94
Code Injection 		CVE-2024-45848 2024-09-17 02:33 2024-09-12 Show GitHub Exploit DB Packet Storm
1707 8.8 HIGH
Network 		mindsdb mindsdb An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server. If a specially crafted ‘UPD… CWE-94
Code Injection 		CVE-2024-45847 2024-09-17 02:31 2024-09-12 Show GitHub Exploit DB Packet Storm
1708 8.8 HIGH
Network 		mindsdb mindsdb An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT… CWE-94
Code Injection 		CVE-2024-45846 2024-09-17 02:30 2024-09-12 Show GitHub Exploit DB Packet Storm
1709 5.4 MEDIUM
Network 		rocket.chat rocket.chat The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external acti… CWE-79
Cross-site Scripting 		CVE-2024-45621 2024-09-17 02:28 2024-09-3 Show GitHub Exploit DB Packet Storm
1710 5.4 MEDIUM
Network 		elabftw elabftw eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript… CWE-79
Cross-site Scripting 		CVE-2024-28100 2024-09-17 02:28 2024-09-3 Show GitHub Exploit DB Packet Storm