Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199031 9.3 危険 RenRen - RenRen Talk における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0915 2012-01-27 11:07 2012-01-24 Show GitHub Exploit DB Packet Storm
199032 4.3 警告 Horde - Horde Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0909 2012-01-27 11:05 2012-01-24 Show GitHub Exploit DB Packet Storm
199033 4.3 警告 SimpleSAMLphp - SimpleSAMLphp の logout.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0908 2012-01-27 11:04 2012-01-24 Show GitHub Exploit DB Packet Storm
199034 4.3 警告 Horde - Horde IMP および Horde Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0791 2012-01-27 11:04 2012-01-24 Show GitHub Exploit DB Packet Storm
199035 4.3 警告 OETIKER - Smokeping の smokeping_cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0790 2012-01-27 11:03 2012-01-24 Show GitHub Exploit DB Packet Storm
199036 4.3 警告 MailEnable - MailEnable の ForgottenPassword.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0389 2012-01-27 11:01 2012-01-24 Show GitHub Exploit DB Packet Storm
199037 7.5 危険 Batavi - Batavi の ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0069 2012-01-27 10:55 2012-01-24 Show GitHub Exploit DB Packet Storm
199038 10 危険 日立 - 日立の複数の COBOL2002 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0918 2012-01-26 16:54 2012-01-20 Show GitHub Exploit DB Packet Storm
199039 4.3 警告 日立 - Hitachi IT Operations Director におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0919 2012-01-26 16:53 2012-01-10 Show GitHub Exploit DB Packet Storm
199040 4.3 警告 日立 - Hitachi IT Operations Analyzer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0917 2012-01-26 16:49 2012-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 4:17 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2371 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: LoongArch: Don't crash in stack_top() for tasks without vDSO Not all tasks have a vDSO mapped, for example kthreads never do. If … CWE-476
 NULL Pointer Dereference 		CVE-2024-50133 2024-11-8 06:17 2024-11-6 Show GitHub Exploit DB Packet Storm
2372 4.8 MEDIUM
Network 		kevonadonis wp_abstracts Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-50411 2024-11-8 06:09 2024-10-29 Show GitHub Exploit DB Packet Storm
2373 6.1 MEDIUM
Network 		rafasashi todo_custom_field Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rafasashi Todo Custom Field allows Reflected XSS.This issue affects Todo Custom Field: fro… CWE-79
Cross-site Scripting 		CVE-2024-49642 2024-11-8 05:59 2024-10-29 Show GitHub Exploit DB Packet Storm
2374 5.4 MEDIUM
Network 		basticom framework The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and ou… CWE-79
Cross-site Scripting 		CVE-2024-9443 2024-11-8 05:56 2024-11-5 Show GitHub Exploit DB Packet Storm
2375 6.5 MEDIUM
Network 		liferay liferay_portal
digital_experience_platform 		The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions,… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-25143 2024-11-8 05:55 2024-02-8 Show GitHub Exploit DB Packet Storm
2376 5.9 MEDIUM
Network 		wolfssl wolfssl wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFL… CWE-203
 Information Exposure Through Discrepancy 		CVE-2023-6935 2024-11-8 05:41 2024-02-10 Show GitHub Exploit DB Packet Storm
2377 - - - An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application. - CVE-2024-51358 2024-11-8 05:35 2024-11-6 Show GitHub Exploit DB Packet Storm
2378 4.3 MEDIUM
Network 		shaon post_from_frontend The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-9689 2024-11-8 05:35 2024-11-5 Show GitHub Exploit DB Packet Storm
2379 - - - util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. - CVE-2024-47855 2024-11-8 05:35 2024-10-4 Show GitHub Exploit DB Packet Storm
2380 - - - In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck() If due to a memory allocation failure mock_chain() returns NULL, it is pas… - CVE-2024-35916 2024-11-8 05:35 2024-05-19 Show GitHub Exploit DB Packet Storm