Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 1, 2024, 12:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199611	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2204	2010-07-21 16:28	2010-06-29	Show	GitHub Exploit DB Packet Storm

199612	6.8	警告	アドビシステムズレッドハット	-	UNIX 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2203	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

199613	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2202	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

199614	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2201	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

199615	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2168	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

199616	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

199617	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

199618	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

199619	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

199620	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 1, 2024, 12:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
651	4.3	MEDIUM Network	radiustheme	classified_listing_-_classified_ads_\&_business_directory	The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(…	CWE-862 Missing Authorization	CVE-2024-7888	2024-09-27 22:45	2024-09-13	Show	GitHub Exploit DB Packet Storm

652	8.8	HIGH Network	wpml	wpml	The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via the Twig Server-Side Template Injection. This is due to missing input validation …	CWE-94 Code Injection	CVE-2024-6386	2024-09-27 22:25	2024-08-22	Show	GitHub Exploit DB Packet Storm

653	8.8	HIGH Network	acymailing	acymailing	The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7384	2024-09-27 22:15	2024-08-22	Show	GitHub Exploit DB Packet Storm

654	6.6	MEDIUM Local	linux fedoraproject redhat	linux_kernel fedora enterprise_linux	A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each itera…	NVD-CWE-Other	CVE-2024-0607	2024-09-27 22:15	2024-01-19	Show	GitHub Exploit DB Packet Storm

655	8.8	HIGH Network	wpmarketingrobot	woocommerce_google_feed_manager	The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wppfm_removeFeedFile' function in all versions up to, and…	CWE-862 Missing Authorization	CVE-2024-7258	2024-09-27 22:05	2024-08-23	Show	GitHub Exploit DB Packet Storm

656	4.3	MEDIUM Network	webba-booking	webba_booking	The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_appearance() func…	CWE-862 Missing Authorization	CVE-2024-8432	2024-09-27 21:58	2024-09-24	Show	GitHub Exploit DB Packet Storm

657	6.1	MEDIUM Network	fatcatapps	pixel_cat	The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions u…	CWE-79 Cross-site Scripting	CVE-2024-8544	2024-09-27 21:57	2024-09-24	Show	GitHub Exploit DB Packet Storm

658	5.4	MEDIUM Network	ggnome	garden_gnome_package	The Garden Gnome Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ggpkg shortcode in all versions up to, and including, 2.2.9 due to insufficient input sanit…	CWE-79 Cross-site Scripting	CVE-2024-8657	2024-09-27 21:56	2024-09-24	Show	GitHub Exploit DB Packet Storm

659	6.1	MEDIUM Network	ibericode	koko_analytics	The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1…	CWE-79 Cross-site Scripting	CVE-2024-8662	2024-09-27 21:54	2024-09-24	Show	GitHub Exploit DB Packet Storm

660	4.3	MEDIUM Network	themify	themify_builder	The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicate_page_ajaxify function in all versions up to, and including, 7.6.1. This …	CWE-863 Incorrect Authorization	CVE-2024-7836	2024-09-27 21:53	2024-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed