Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 29, 2024, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196431	5.5	警告	オラクル	-	Oracle Database Server の Core RDBMS コンポーネントおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3512	2011-10-26 16:42	2011-10-18	Show	GitHub Exploit DB Packet Storm

196432	3.6	注意	オラクル	-	Oracle Database Server の Database Vault コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3511	2011-10-26 16:40	2011-10-18	Show	GitHub Exploit DB Packet Storm

196433	3.6	注意	オラクル	-	Oracle Database Server の Database Vault コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2322	2011-10-26 16:40	2011-10-18	Show	GitHub Exploit DB Packet Storm

196434	4.1	警告	オラクル	-	Oracle Database Server の Oracle Text コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2301	2011-10-26 16:39	2011-10-18	Show	GitHub Exploit DB Packet Storm

196435	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3519	2011-10-26 16:38	2011-10-18	Show	GitHub Exploit DB Packet Storm

196436	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3513	2011-10-26 16:37	2011-10-18	Show	GitHub Exploit DB Packet Storm

196437	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2308	2011-10-26 16:36	2011-10-18	Show	GitHub Exploit DB Packet Storm

196438	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2303	2011-10-26 16:36	2011-10-18	Show	GitHub Exploit DB Packet Storm

196439	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2302	2011-10-26 16:32	2011-10-18	Show	GitHub Exploit DB Packet Storm

196440	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3523	2011-10-26 16:31	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 29, 2024, 12:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
471	8.8	HIGH Network	xwp	stream	The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to missing or incorrect nonce validation on the network_options_ac… Update	CWE-352 Origin Validation Error	CVE-2024-7423	2024-09-27 05:08	2024-09-14	Show	GitHub Exploit DB Packet Storm

472	6.1	MEDIUM Network	slicewp	affiliate_program_suite	The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in… Update	CWE-79 Cross-site Scripting	CVE-2024-8714	2024-09-27 05:06	2024-09-14	Show	GitHub Exploit DB Packet Storm

473	6.1	MEDIUM Network	leira	roles_\&_capabilities	The Roles & Capabilities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and includ… Update	CWE-79 Cross-site Scripting	CVE-2024-8732	2024-09-27 05:01	2024-09-14	Show	GitHub Exploit DB Packet Storm

474	6.1	MEDIUM Network	cvstech	exit_notifier	The Exit Notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.… Update	CWE-79 Cross-site Scripting	CVE-2024-8730	2024-09-27 04:58	2024-09-14	Show	GitHub Exploit DB Packet Storm

475	6.1	MEDIUM Network	leira	cron_jobs	The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.9.… Update	CWE-79 Cross-site Scripting	CVE-2024-8731	2024-09-27 04:43	2024-09-14	Show	GitHub Exploit DB Packet Storm

476	-		-	-	The goTenna Pro series use AES CTR mode for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to any attacker that can access the message. New	CWE-353 Missing Support for Integrity Check	CVE-2024-47123	2024-09-27 04:35	2024-09-27	Show	GitHub Exploit DB Packet Storm

477	-		-	-	A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject malicious scripts that will be executed when the Donor List i… New	-	CVE-2024-45984	2024-09-27 04:35	2024-09-27	Show	GitHub Exploit DB Packet Storm

478	9.8	CRITICAL Network	dedecms	dedecms	DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. Update	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2023-40784	2024-09-27 04:35	2023-09-13	Show	GitHub Exploit DB Packet Storm

479	7.8	HIGH Local	raidenftpd	raidenftpd	Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard. Update	CWE-120 Classic Buffer Overflow	CVE-2023-39063	2024-09-27 04:35	2023-09-12	Show	GitHub Exploit DB Packet Storm

480	8.0	HIGH Adjacent	tp-link	archer_c3150_firmware	Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Update	CWE-78 OS Command	CVE-2023-38588	2024-09-27 04:35	2023-09-6	Show	GitHub Exploit DB Packet Storm