Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198741 9.3 危険 マイクロソフト - Microsoft Windows の msvcrt.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0150 2012-02-20 18:10 2012-02-14 Show GitHub Exploit DB Packet Storm
198742 9.3 危険 マイクロソフト - Microsoft Visio Viewer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0019 2012-02-20 18:08 2012-02-14 Show GitHub Exploit DB Packet Storm
198743 9.3 危険 マイクロソフト - Microsoft Visio Viewer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0020 2012-02-20 18:06 2012-02-14 Show GitHub Exploit DB Packet Storm
198744 9.3 危険 マイクロソフト - Microsoft Visio Viewer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0136 2012-02-20 18:04 2012-02-14 Show GitHub Exploit DB Packet Storm
198745 9.3 危険 マイクロソフト - Microsoft Visio Viewer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0137 2012-02-20 18:03 2012-02-14 Show GitHub Exploit DB Packet Storm
198746 9.3 危険 マイクロソフト - Microsoft Visio Viewer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0138 2012-02-20 18:01 2012-02-14 Show GitHub Exploit DB Packet Storm
198747 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0014 2012-02-20 17:29 2012-02-14 Show GitHub Exploit DB Packet Storm
198748 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0015 2012-02-20 17:27 2012-02-14 Show GitHub Exploit DB Packet Storm
198749 4.3 警告 シスコシステムズ - Cisco IronPort Encryption Appliance の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0340 2012-02-20 16:38 2012-02-13 Show GitHub Exploit DB Packet Storm
198750 7.8 危険 シスコシステムズ - 複数の Cisco Nexus スイッチの Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0352 2012-02-20 16:27 2012-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 12:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1381 9.8 CRITICAL
Network 		- - The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to… CWE-22
Path Traversal 		CVE-2024-11150 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1382 8.8 HIGH
Network 		- - The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 1… CWE-862
 Missing Authorization 		CVE-2024-10800 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1383 - - - CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices. CWE-862
 Missing Authorization 		CVE-2024-10575 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1384 - - - CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integrity of controllers when conducting a Man-In-The-Middle attac… CWE-290
 Authentication Bypass by Spoofing 		CVE-2024-8935 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1385 - - - All versions of the package dom-iterator are vulnerable to Arbitrary Code Execution due to use of the Function constructor without complete input sanitization. Function generates a new function body … - CVE-2024-21541 2024-11-13 14:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1386 - - - CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service… - CVE-2024-8933 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1387 8.1 HIGH
Network 		- - The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order ex… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10828 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1388 - - - The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 84.3… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-10820 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1389 7.5 HIGH
Network 		- - The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticat… - CVE-2024-10816 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1390 5.3 MEDIUM
Network 		- - The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hash_elements_get_posts_title_by_id() function in all versions up to, and … CWE-862
 Missing Authorization 		CVE-2024-10802 2024-11-13 13:15 2024-11-13 Show GitHub Exploit DB Packet Storm