Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198981 10 危険 アドビシステムズ - Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0761 2012-02-16 11:09 2012-02-14 Show GitHub Exploit DB Packet Storm
198982 10 危険 アドビシステムズ - Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0760 2012-02-16 11:06 2012-02-14 Show GitHub Exploit DB Packet Storm
198983 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0759 2012-02-16 11:05 2012-02-14 Show GitHub Exploit DB Packet Storm
198984 10 危険 アドビシステムズ - Adobe Shockwave Player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0758 2012-02-16 11:02 2012-02-14 Show GitHub Exploit DB Packet Storm
198985 10 危険 アドビシステムズ - Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0757 2012-02-16 11:00 2012-02-14 Show GitHub Exploit DB Packet Storm
198986 6.4 警告 富士通 - Fujitsu Interstage Application Server の Interstage 管理コンソールにおける任意のファイル読込/削除の脆弱性 CWE-noinfo
情報不足 		CVE-2008-2674 2012-02-15 18:12 2008-06-10 Show GitHub Exploit DB Packet Storm
198987 - - 日本電気
PNG Development Group
フェンリル株式会社		 - libpng における sCAL チャンクの処理に脆弱性 - - 2012-02-15 16:45 2011-07-8 Show GitHub Exploit DB Packet Storm
198988 5.8 警告 Netcreators - TYPO3 用 Modern FAQ エクステンションにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5079 2012-02-15 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
198989 5 警告 The PHP Group - PHP のタイムゾーン機能におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0789 2012-02-15 16:03 2012-01-10 Show GitHub Exploit DB Packet Storm
198990 5 警告 The PHP Group - PHP の PDORow 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0788 2012-02-15 16:02 2012-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 20, 2024, 6:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2901 4.6 MEDIUM
Network 		apache nifi Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenti… CWE-79
Cross-site Scripting 		CVE-2024-45477 2024-11-9 00:03 2024-10-29 Show GitHub Exploit DB Packet Storm
2902 7.2 HIGH
Network 		davidlingren media_library_assistant Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media Library Assistant allows Command Injection.This issue affects Media Lib… CWE-78
OS Command  		CVE-2024-51661 2024-11-9 00:02 2024-11-4 Show GitHub Exploit DB Packet Storm
2903 4.6 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to sanitize user inputs in the frontend that are used for redirection which allows for a one-click client-side path travers… CWE-352
 Origin Validation Error 		CVE-2024-46872 2024-11-9 00:00 2024-10-29 Show GitHub Exploit DB Packet Storm
2904 6.1 MEDIUM
Network 		latex2html latex2html Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Van Abel LaTeX2HTML allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through 2… CWE-79
Cross-site Scripting 		CVE-2024-49673 2024-11-8 23:57 2024-10-29 Show GitHub Exploit DB Packet Storm
2905 6.1 MEDIUM
Network 		samglover client_power_tools Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sam Glover Client Power Tools Portal allows Reflected XSS.This issue affects Client Power … CWE-79
Cross-site Scripting 		CVE-2024-49670 2024-11-8 23:57 2024-10-29 Show GitHub Exploit DB Packet Storm
2906 5.4 MEDIUM
Network 		affiliatexblocks affiliatex Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AffiliateX allows Stored XSS.This issue affects AffiliateX: from n/a through 1.2.9. CWE-79
Cross-site Scripting 		CVE-2024-49692 2024-11-8 23:55 2024-10-29 Show GitHub Exploit DB Packet Storm
2907 5.4 MEDIUM
Network 		brainstormforce astra_widgets Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/… CWE-79
Cross-site Scripting 		CVE-2024-50439 2024-11-8 23:53 2024-10-29 Show GitHub Exploit DB Packet Storm
2908 5.4 MEDIUM
Network 		wpkoi wpkoi_templates_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPKoi WPKoi Templates for Elementor allows Stored XSS.This issue affects WPKoi Templates f… CWE-79
Cross-site Scripting 		CVE-2024-49679 2024-11-8 23:52 2024-10-29 Show GitHub Exploit DB Packet Storm
2909 6.1 MEDIUM
Network 		themoyles church_admin Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a bef… CWE-79
Cross-site Scripting 		CVE-2024-50438 2024-11-8 23:52 2024-10-29 Show GitHub Exploit DB Packet Storm
2910 4.7 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix race condition between reset and nvme_dev_disable() nvme_dev_disable() modifies the dev->online_queues field, there… CWE-362
Race Condition 		CVE-2024-50135 2024-11-8 23:34 2024-11-6 Show GitHub Exploit DB Packet Storm