Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 12, 2024, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197631 7.5 危険 PHP Web Scripts - PHP Web Scripts Ad Manager Pro の website-page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4843 2011-09-30 14:09 2011-09-27 Show GitHub Exploit DB Packet Storm
197632 7.5 危険 MH Products - MHP DownloadScript の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4842 2011-09-30 14:09 2011-09-27 Show GitHub Exploit DB Packet Storm
197633 10 危険 Interactive Data Corporation. - eSignal の WinSig.exe におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3494 2011-09-30 14:01 2011-09-16 Show GitHub Exploit DB Packet Storm
197634 5 警告 Cogent Real-Time Systems Inc. - Cogent DataHub における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3501 2011-09-30 13:35 2011-09-16 Show GitHub Exploit DB Packet Storm
197635 10 危険 Progea Srl - Progea Movicon / PowerHMI におけるサービス運用妨害 (メモリ破損およびクラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3499 2011-09-30 13:29 2011-09-16 Show GitHub Exploit DB Packet Storm
197636 10 危険 Progea Srl - Progea Movicon / PowerHMI におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3491 2011-09-30 13:23 2011-09-16 Show GitHub Exploit DB Packet Storm
197637 4.9 警告 baserCMSユーザー会 - BaserCMS におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2674 2011-09-30 12:04 2011-09-30 Show GitHub Exploit DB Packet Storm
197638 4.3 警告 baserCMSユーザー会 - BaserCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2673 2011-09-30 12:03 2011-09-30 Show GitHub Exploit DB Packet Storm
197639 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3747 2011-09-29 16:56 2011-09-23 Show GitHub Exploit DB Packet Storm
197640 9.3 危険 Argonne National Laboratory - Bcfg2 のサーバにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3211 2011-09-29 14:30 2011-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 10, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 6.5 MEDIUM
Network 		- - The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the 'import_action' and 'install_plugin_per_demo' function… New CWE-862
 Missing Authorization 		CVE-2024-9860 2024-10-12 12:15 2024-10-12 Show GitHub Exploit DB Packet Storm
2 8.8 HIGH
Network 		- - The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all vers… New CWE-200
Information Exposure 		CVE-2024-9821 2024-10-12 12:15 2024-10-12 Show GitHub Exploit DB Packet Storm
3 6.1 MEDIUM
Network 		- - The Easy PayPal Gift Certificate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation on the … New CWE-352
 Origin Validation Error 		CVE-2024-9592 2024-10-12 12:15 2024-10-12 Show GitHub Exploit DB Packet Storm
4 8.8 HIGH
Network 		cbc nr4h_firmware
nr8h_firmware
nr16h_firmware
dr-16f42a_firmware
dr-16f45at_firmware
dr-8f42a_firmware
dr-8f45at_firmware
dr-4fx1_firmware
dr-16h_firmware
dr-8h_firmware
dr… 		Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/vers… Update NVD-CWE-Other
CVE-2023-40158 2024-10-12 07:35 2023-08-23 Show GitHub Exploit DB Packet Storm
5 - - - An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection c… New - CVE-2024-45754 2024-10-12 07:15 2024-10-12 Show GitHub Exploit DB Packet Storm
6 - - - Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode parameter with ap_24g_manual set to 1 a… New - CVE-2024-35522 2024-10-12 07:15 2024-10-12 Show GitHub Exploit DB Packet Storm
7 - - - Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter. New - CVE-2024-35517 2024-10-12 07:15 2024-10-12 Show GitHub Exploit DB Packet Storm
8 7.8 HIGH
Local 		deltaww cncsoft-b
dopsoft 		Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code. Update CWE-121
Stack-based Buffer Overflow 		CVE-2023-4685 2024-10-12 07:15 2023-09-8 Show GitHub Exploit DB Packet Storm
9 4.3 MEDIUM
Network 		adobe commerce
magento
commerce_b2b 		Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged a… New NVD-CWE-noinfo
CVE-2024-45149 2024-10-12 07:12 2024-10-10 Show GitHub Exploit DB Packet Storm
10 6.5 MEDIUM
Network 		adobe commerce
magento
commerce_b2b 		Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a… New NVD-CWE-noinfo
CVE-2024-45148 2024-10-12 07:12 2024-10-10 Show GitHub Exploit DB Packet Storm