Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 1, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196631 9.3 危険 オラクル - Oracle Solaris における LDAP library の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3508 2011-10-27 16:09 2011-10-18 Show GitHub Exploit DB Packet Storm
196632 4.3 警告 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2313 2011-10-27 16:08 2011-10-18 Show GitHub Exploit DB Packet Storm
196633 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Supplier Collaboration for Process コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3532 2011-10-27 16:06 2011-10-18 Show GitHub Exploit DB Packet Storm
196634 4.3 警告 オラクル - Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2323 2011-10-27 10:07 2011-10-18 Show GitHub Exploit DB Packet Storm
196635 4.3 警告 オラクル - Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2309 2011-10-27 10:07 2011-10-18 Show GitHub Exploit DB Packet Storm
196636 6.8 警告 オラクル - Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3538 2011-10-27 10:06 2011-10-18 Show GitHub Exploit DB Packet Storm
196637 5.5 警告 オラクル - Oracle Linux の Oracle Validated 処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2306 2011-10-27 10:05 2011-10-19 Show GitHub Exploit DB Packet Storm
196638 2.1 注意 オラクル - 複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3522 2011-10-27 10:04 2011-10-18 Show GitHub Exploit DB Packet Storm
196639 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における JPM の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3533 2011-10-27 10:03 2011-10-18 Show GitHub Exploit DB Packet Storm
196640 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3529 2011-10-27 10:01 2011-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 1, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
561 8.2 HIGH
Network 		apache ivy Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy pr… CWE-91
CWE-611
Blind XPath Injection
XXE 		CVE-2022-46751 2024-09-28 06:35 2023-08-21 Show GitHub Exploit DB Packet Storm
562 6.1 MEDIUM
Network 		mm-breaking_news_project mm-breaking_news The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting… CWE-79
Cross-site Scripting 		CVE-2024-8056 2024-09-28 06:29 2024-09-12 Show GitHub Exploit DB Packet Storm
563 6.1 MEDIUM
Network 		mm-breaking_news_project mm-breaking_news The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add S… CWE-79
Cross-site Scripting 		CVE-2024-8054 2024-09-28 06:29 2024-09-12 Show GitHub Exploit DB Packet Storm
564 4.8 MEDIUM
Network 		ninjateam header_footer_custom_code The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit… CWE-79
Cross-site Scripting 		CVE-2024-6617 2024-09-28 06:28 2024-09-13 Show GitHub Exploit DB Packet Storm
565 4.8 MEDIUM
Network 		ninjateam header_footer_custom_code The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit… CWE-79
Cross-site Scripting 		CVE-2024-6493 2024-09-28 06:28 2024-09-13 Show GitHub Exploit DB Packet Storm
566 6.8 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary f… CWE-352
 Origin Validation Error 		CVE-2024-7863 2024-09-28 06:27 2024-09-13 Show GitHub Exploit DB Packet Storm
567 4.8 MEDIUM
Network 		premio my_sticky_bar The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputtin… CWE-79
Cross-site Scripting 		CVE-2024-7133 2024-09-28 06:27 2024-09-13 Show GitHub Exploit DB Packet Storm
568 6.5 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitra… CWE-352
 Origin Validation Error 		CVE-2024-7864 2024-09-28 06:26 2024-09-13 Show GitHub Exploit DB Packet Storm
569 6.5 MEDIUM
Network 		gowildchild visual_sound The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-8047 2024-09-28 06:25 2024-09-17 Show GitHub Exploit DB Packet Storm
570 6.1 MEDIUM
Network 		outtolunchproductions simple_headline_rotator The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin … CWE-79
Cross-site Scripting 		CVE-2024-7860 2024-09-28 05:56 2024-09-12 Show GitHub Exploit DB Packet Storm