Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199091	9.3	危険	DELL EMC (旧 EMC Corporation)	-	EMC NetWorker のサーバにおけるバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0395	2012-01-30 15:12	2012-01-27	Show	GitHub Exploit DB Packet Storm

199092	5	警告	RSAセキュリティ	-	EMC RSA enVision における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4143	2012-01-30 15:11	2012-01-27	Show	GitHub Exploit DB Packet Storm

199093	5.8	警告	OpenSSL Project	-	32-bit プラットフォーム上の OpenSSL における TLS サーバの秘密鍵を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-4354	2012-01-30 15:10	2012-01-15	Show	GitHub Exploit DB Packet Storm

199094	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin のリダイレクタ機能におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-1941	2012-01-30 15:05	2011-05-22	Show	GitHub Exploit DB Packet Storm

199095	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1940	2012-01-30 15:03	2011-05-22	Show	GitHub Exploit DB Packet Storm

199096	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2377	2012-01-27 16:40	2011-06-21	Show	GitHub Exploit DB Packet Storm

199097	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2373	2012-01-27 16:39	2011-06-21	Show	GitHub Exploit DB Packet Storm

199098	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2371	2012-01-27 16:38	2011-06-21	Show	GitHub Exploit DB Packet Storm

199099	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2365	2012-01-27 16:32	2011-06-21	Show	GitHub Exploit DB Packet Storm

199100	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsSVGPointList::AppendElement 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2363	2012-01-27 16:31	2011-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1041	8.8	HIGH Network	ultrapress	ultrapress	The UltraPress theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.1 via deserialization of untrusted input. This makes it possible for authenticated a…	CWE-502 Deserialization of Untrusted Data	CVE-2024-7434	2024-11-14 07:05	2024-10-1	Show	GitHub Exploit DB Packet Storm

1042	8.8	HIGH Network	ultrapress	empowerment	The Empowerment theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.2 via deserialization of untrusted input. This makes it possible for authenticated …	CWE-502 Deserialization of Untrusted Data	CVE-2024-7433	2024-11-14 07:04	2024-10-1	Show	GitHub Exploit DB Packet Storm

1043	8.8	HIGH Network	ultrapress	unseen_blog	The Unseen Blog theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input. This makes it possible for authenticated …	CWE-502 Deserialization of Untrusted Data	CVE-2024-7432	2024-11-14 07:03	2024-10-1	Show	GitHub Exploit DB Packet Storm

1044	3.7	LOW Network	netadmin	netadmin_iam	A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUser…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-9513	2024-11-14 06:57	2024-10-4	Show	GitHub Exploit DB Packet Storm

1045	9.8	CRITICAL Network	ruijie	rg-nbs2009g-p_firmware	An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.	NVD-CWE-noinfo	CVE-2024-24116	2024-11-14 06:43	2024-10-3	Show	GitHub Exploit DB Packet Storm

1046	3.3	LOW Local	wondershare	edraw	A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special …	NVD-CWE-noinfo	CVE-2024-24122	2024-11-14 06:40	2024-10-3	Show	GitHub Exploit DB Packet Storm

1047	-		-	-	wasm3 139076a is vulnerable to Denial of Service (DoS).	-	CVE-2024-27527	2024-11-14 06:35	2024-11-9	Show	GitHub Exploit DB Packet Storm

1048	7.5	HIGH Network	jerryscript	jerryscript	An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays.	NVD-CWE-noinfo	CVE-2023-36201	2024-11-14 06:35	2023-07-8	Show	GitHub Exploit DB Packet Storm

1049	5.4	MEDIUM Network	zohocorp	manageengine_servicedesk_plus manageengine_servicedesk_plus_msp manageengine_supportcenter_plus	Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unp…	NVD-CWE-noinfo	CVE-2023-34197	2024-11-14 06:35	2023-07-7	Show	GitHub Exploit DB Packet Storm

1050	-		-	-	Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use of the REST API with an invalid License File. Attackers may be able to retrieve …	-	CVE-2024-48939	2024-11-14 06:15	2024-11-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed