Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 30, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198471 9 危険 シスコシステムズ - Cisco TelePresence エンドポイントデバイスにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0375 2011-11-29 09:51 2011-02-23 Show GitHub Exploit DB Packet Storm
198472 9 危険 シスコシステムズ - Cisco TelePresence エンドポイントデバイスにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0374 2011-11-29 09:50 2011-02-23 Show GitHub Exploit DB Packet Storm
198473 9 危険 シスコシステムズ - Cisco TelePresence エンドポイントデバイスにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0373 2011-11-29 09:50 2011-02-23 Show GitHub Exploit DB Packet Storm
198474 10 危険 シスコシステムズ - Cisco TelePresence エンドポイントデバイスにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0372 2011-11-29 09:49 2011-02-23 Show GitHub Exploit DB Packet Storm
198475 10 危険 シスコシステムズ - Cisco Security Agent の Management Console における任意のファイルを作られる脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0364 2011-11-29 09:48 2011-02-16 Show GitHub Exploit DB Packet Storm
198476 7.8 危険 VMware
シスコシステムズ		 - Cisco Nexus 1000V Virtual Ethernet Module におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0355 2011-11-29 09:46 2011-02-7 Show GitHub Exploit DB Packet Storm
198477 7.5 危険 日本電気
アップル
アライドテレシス
サン・マイクロシステムズ
BEAシステムズ
レッドハット		 - Java Web Start において許可されていないシステムクラスが実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2435 2011-11-28 16:52 2007-04-30 Show GitHub Exploit DB Packet Storm
198478 4 警告 サイボウズ - サイボウズ Office におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2677 2011-11-28 16:45 2011-10-7 Show GitHub Exploit DB Packet Storm
198479 6.8 警告 Zenprise Inc. - Zenprise Device Manager にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4498 2011-11-28 14:56 2011-11-21 Show GitHub Exploit DB Packet Storm
198480 7.5 危険 アップル - Apple iTunes における脆弱性に対するアップデート CWE-94
コード・インジェクション 		CVE-2008-3434 2011-11-28 14:56 2011-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 31, 2024, 6:02 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 5.4 MEDIUM
Network 		pickplugins post_grid The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute in bloc… Update CWE-79
Cross-site Scripting 		CVE-2024-1988 2024-10-30 04:54 2024-06-7 Show GitHub Exploit DB Packet Storm
362 7.5 HIGH
Network 		qodeinteractive qi_addons_for_elementor The Qi Addons For Elementor plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 1.7.2 via the 'behavior' attributes found in the qi_addons_for_elementor_… Update CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2024-4887 2024-10-30 04:52 2024-06-7 Show GitHub Exploit DB Packet Storm
363 5.4 MEDIUM
Network 		nayrathemes clever_fox The Clever Fox – One Click Website Importer by Nayra Themes plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clever-fox-activate-theme… Update CWE-862
 Missing Authorization 		CVE-2023-6876 2024-10-30 04:50 2024-06-7 Show GitHub Exploit DB Packet Storm
364 5.4 MEDIUM
Network 		lightpress lightbox The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in all versions up to, and including, 1.5.4 due to insufficient input sanitization a… Update CWE-79
Cross-site Scripting 		CVE-2024-5425 2024-10-30 04:49 2024-06-7 Show GitHub Exploit DB Packet Storm
365 5.3 MEDIUM
Network 		themefarmer woocommerce_tools The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to,… Update CWE-862
 Missing Authorization 		CVE-2024-1689 2024-10-30 04:49 2024-06-7 Show GitHub Exploit DB Packet Storm
366 5.4 MEDIUM
Network 		nayrathemes clever_fox The Clever Fox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's info box block in all versions up to, and including, 25.2.0 due to insufficient input sanitization an… Update CWE-79
Cross-site Scripting 		CVE-2024-1768 2024-10-30 04:44 2024-06-7 Show GitHub Exploit DB Packet Storm
367 - - - An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/m… New - CVE-2024-48074 2024-10-30 04:35 2024-10-28 Show GitHub Exploit DB Packet Storm
368 - - - An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS). Update - CVE-2024-48239 2024-10-30 04:35 2024-10-26 Show GitHub Exploit DB Packet Storm
369 - - - WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter. Update - CVE-2024-48238 2024-10-30 04:35 2024-10-26 Show GitHub Exploit DB Packet Storm
370 - - - An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\File… Update - CVE-2024-48236 2024-10-30 04:35 2024-10-26 Show GitHub Exploit DB Packet Storm