Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 19, 2024, 6:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196331 5 警告 アップル
VMware
OpenSSL Project
IBM
ヒューレット・パッカード
- OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0740 2011-06-29 10:08 2010-03-24 Show GitHub Exploit DB Packet Storm
196332 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2094 2011-06-28 12:25 2011-06-14 Show GitHub Exploit DB Packet Storm
196333 5 警告 アドビシステムズ - Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2091 2011-06-28 12:23 2011-06-14 Show GitHub Exploit DB Packet Storm
196334 6.8 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0629 2011-06-28 12:22 2011-06-14 Show GitHub Exploit DB Packet Storm
196335 10 危険 アドビシステムズ
ターボリナックス
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2110 2011-06-28 12:21 2011-06-14 Show GitHub Exploit DB Packet Storm
196336 5 警告 ISC, Inc.
ターボリナックス
- ISC DHCP の dhcpd におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-16
環境設定
CVE-2009-1892 2011-06-28 12:19 2009-10-7 Show GitHub Exploit DB Packet Storm
196337 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1266 2011-06-28 12:18 2011-06-14 Show GitHub Exploit DB Packet Storm
196338 4.3 警告 マイクロソフト - Windows Server 2003 および 2008 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1264 2011-06-28 12:17 2011-06-14 Show GitHub Exploit DB Packet Storm
196339 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1261 2011-06-28 12:16 2011-06-14 Show GitHub Exploit DB Packet Storm
196340 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 8 における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1258 2011-06-28 12:16 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 20, 2024, 5:55 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1951 7.5 HIGH
Network
apollographql apollo_router
apollo_helms-charts_router
apollo-router
apollo_query-planner
apollo_gateway
Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowering them to deliver autonomously and incre… CWE-674
 Uncontrolled Recursion
CVE-2024-43414 2024-09-13 06:33 2024-08-28 Show GitHub Exploit DB Packet Storm
1952 5.4 MEDIUM
Network
wpmanageninja ninja_tables The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.12 due to insufficient i… CWE-79
Cross-site Scripting
CVE-2024-7304 2024-09-13 06:32 2024-08-27 Show GitHub Exploit DB Packet Storm
1953 5.4 MEDIUM
Network
jegtheme jeg_elementor_kit The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.7 due to insufficient input sanitization and out… CWE-79
Cross-site Scripting
CVE-2024-6804 2024-09-13 06:31 2024-08-27 Show GitHub Exploit DB Packet Storm
1954 9.8 CRITICAL
Network
bylancer quicklancer A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the component GET Parameter Handler. The manip… CWE-89
SQL Injection
CVE-2024-7188 2024-09-13 06:31 2024-07-29 Show GitHub Exploit DB Packet Storm
1955 8.8 HIGH
Network
naiches dark_mode_for_wp_dashboard Cross-Site Request Forgery (CSRF) vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3. CWE-352
 Origin Validation Error
CVE-2024-43325 2024-09-13 06:28 2024-08-27 Show GitHub Exploit DB Packet Storm
1956 7.8 HIGH
Local
skygroup skysea_client_view Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a … CWE-346
 Origin Validation Error
CVE-2024-41143 2024-09-13 06:27 2024-07-29 Show GitHub Exploit DB Packet Storm
1957 4.3 MEDIUM
Network
checkoutplugins stripe_payments_for_woocommerce Cross-Site Request Forgery (CSRF) vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Payments For WooCommerce by Checkout: from n/a through 1.9.1. CWE-352
 Origin Validation Error
CVE-2024-43316 2024-09-13 06:26 2024-08-27 Show GitHub Exploit DB Packet Storm
1958 5.4 MEDIUM
Network
fontsplugin fonts_plugin Cross-Site Request Forgery (CSRF) vulnerability in Fonts Plugin Fonts allows Stored XSS.This issue affects Fonts: from n/a through 3.7.7. CWE-352
 Origin Validation Error
CVE-2024-43301 2024-09-13 06:24 2024-08-27 Show GitHub Exploit DB Packet Storm
1959 7.5 HIGH
Network
theme-sphere smartmag Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in ThemeSphere SmartMag allows Excavation, Accessing Functionality Not Properly Constrained by ACLs.Thi… CWE-862
 Missing Authorization
CVE-2024-37930 2024-09-13 06:24 2024-08-13 Show GitHub Exploit DB Packet Storm
1960 5.4 MEDIUM
Network
softaculous speedycache Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Team SpeedyCache.This issue affects SpeedyCache: from n/a through 1.1.8. CWE-352
 Origin Validation Error
CVE-2024-43299 2024-09-13 06:23 2024-08-27 Show GitHub Exploit DB Packet Storm