Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 11, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197511 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2341 2011-10-21 11:42 2011-10-12 Show GitHub Exploit DB Packet Storm
197512 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2339 2011-10-21 11:41 2011-10-12 Show GitHub Exploit DB Packet Storm
197513 4.3 警告 マイクロソフト - 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1893 2011-10-20 16:20 2011-09-13 Show GitHub Exploit DB Packet Storm
197514 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-1980 2011-10-20 16:19 2011-09-13 Show GitHub Exploit DB Packet Storm
197515 9.3 危険 マイクロソフト - Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1982 2011-10-20 16:19 2011-09-13 Show GitHub Exploit DB Packet Storm
197516 7.2 危険 マイクロソフト - Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性性 CWE-264
認可・権限・アクセス制御
CVE-2011-1984 2011-10-20 16:19 2011-09-13 Show GitHub Exploit DB Packet Storm
197517 9.3 危険 マイクロソフト - Microsoft Excel 2003 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-1986 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
197518 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1987 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
197519 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1988 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
197520 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1989 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 10, 2024, 8:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 4.9 MEDIUM
Network
litellm litellm A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to the improper handling of the 'user_id' p… Update CWE-89
SQL Injection
CVE-2024-4890 2024-10-11 05:11 2024-06-7 Show GitHub Exploit DB Packet Storm
62 7.5 HIGH
Network
codehaus-plexus
redhat
plexus-utils
integration_camel_k
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with … Update CWE-22
Path Traversal
CVE-2022-4244 2024-10-11 05:04 2023-09-26 Show GitHub Exploit DB Packet Storm
63 4.3 MEDIUM
Network
codehaus-plexus
redhat
plexus-utils
integration_camel_k
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command str… Update CWE-611
XXE
CVE-2022-4245 2024-10-11 05:02 2023-09-26 Show GitHub Exploit DB Packet Storm
64 7.5 HIGH
Network
thekelleys dnsmasq dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Update CWE-190
 Integer Overflow or Wraparound
CVE-2023-49441 2024-10-11 05:00 2024-06-7 Show GitHub Exploit DB Packet Storm
65 9.8 CRITICAL
Network
codehaus-plexus
debian
plexus-utils
debian_linux
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. Update CWE-78
OS Command 
CVE-2017-1000487 2024-10-11 04:55 2018-01-4 Show GitHub Exploit DB Packet Storm
66 - - - A vulnerability was found in Craig Rodway Classroombookings 2.8.7 and classified as problematic. This issue affects some unknown processing of the file /sessions of the component Session Page. The ma… New - CVE-2024-9807 2024-10-11 04:15 2024-10-11 Show GitHub Exploit DB Packet Storm
67 - - - A vulnerability has been found in Craig Rodway Classroombookings up to 2.8.6 and classified as problematic. This vulnerability affects unknown code of the file /rooms/fields of the component Room Pag… New CWE-79
Cross-site Scripting
CVE-2024-9806 2024-10-11 04:15 2024-10-11 Show GitHub Exploit DB Packet Storm
68 - - - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in EventPrime Events EventPrime.This issue affects EventPrime: from n/a through 4.0.4.5. New CWE-601
Open Redirect
CVE-2024-47648 2024-10-11 04:15 2024-10-11 Show GitHub Exploit DB Packet Storm
69 - - - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple Membership After Login Redirection.This issue affects Simple Membership After Login Redirection: from n/a … New CWE-601
Open Redirect
CVE-2024-47354 2024-10-11 04:15 2024-10-11 Show GitHub Exploit DB Packet Storm
70 6.5 MEDIUM
Network
pivotal
oracle
spring_security_oauth
communications_design_studio
<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Requ… Update NVD-CWE-noinfo
CVE-2022-22969 2024-10-11 04:13 2022-04-22 Show GitHub Exploit DB Packet Storm