Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 8, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199131 4.3 警告 Geeklog - Geeklog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4647 2011-12-1 16:48 2011-06-23 Show GitHub Exploit DB Packet Storm
199132 6 警告 Lester Chan - WordPress 用 WP-PostRatings プラグインにおける SQL インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4646 2011-12-1 16:47 2011-11-30 Show GitHub Exploit DB Packet Storm
199133 7.5 危険 Hastymail - Hastymail2 における任意のコマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4542 2011-12-1 16:46 2011-11-30 Show GitHub Exploit DB Packet Storm
199134 7.5 危険 Novell - Novell NetWare の xdrDecodeString 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4191 2011-12-1 16:44 2011-10-5 Show GitHub Exploit DB Packet Storm
199135 7.5 危険 Namazu Project - Namazu におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-5028 2011-12-1 16:42 2011-11-30 Show GitHub Exploit DB Packet Storm
199136 5 警告 arora - Arora における証明書の Common Name (CN) を偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3367 2011-12-1 16:42 2011-11-29 Show GitHub Exploit DB Packet Storm
199137 7.5 危険 Canonical - Ubuntu の cupshelpers スクリプトにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4405 2011-12-1 16:05 2011-11-17 Show GitHub Exploit DB Packet Storm
199138 5 警告 シスコシステムズ - Cisco Nexus 5000 および 3000 シリーズスイッチにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2581 2011-12-1 11:25 2011-09-7 Show GitHub Exploit DB Packet Storm
199139 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2577 2011-12-1 11:25 2011-08-31 Show GitHub Exploit DB Packet Storm
199140 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager および Cisco Intercompany Media Engine における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2564 2011-12-1 11:24 2011-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 8, 2024, 4:18 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify fo… Update - CVE-2024-23674 2024-11-7 03:35 2024-02-16 Show GitHub Exploit DB Packet Storm
482 3.3 LOW
Local 		google android In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation of privilege with no… Update CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2023-21246 2024-11-7 03:35 2023-07-13 Show GitHub Exploit DB Packet Storm
483 6.5 MEDIUM
Adjacent 		elecom wrc-1167ghbk-s_firmware
wrc-1167gebk-s_firmware
wrc-1167febk-s_firmware
wrc-1167ghbk3-a_firmware
wrc-1167febk-a_firmware 		ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are… Update NVD-CWE-noinfo
CVE-2023-37563 2024-11-7 03:35 2023-07-13 Show GitHub Exploit DB Packet Storm
484 9.8 CRITICAL
Network 		nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, cau… Update NVD-CWE-noinfo
CVE-2024-49368 2024-11-7 03:28 2024-10-22 Show GitHub Exploit DB Packet Storm
485 - - - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability … New CWE-79
Cross-site Scripting 		CVE-2024-20539 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
486 - - - A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a s… New CWE-79
Cross-site Scripting 		CVE-2024-20540 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
487 - - - A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability exis… New CWE-79
Cross-site Scripting 		CVE-2024-20538 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
488 - - - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific administrative functions. This … New CWE-863
 Incorrect Authorization 		CVE-2024-20537 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
489 - - - A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to … New CWE-89
SQL Injection 		CVE-2024-20536 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
490 - - - A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need … New CWE-22
Path Traversal 		CVE-2024-20532 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm