Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 7, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200241	5	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2560	2010-05-20 18:29	2009-07-20	Show	GitHub Exploit DB Packet Storm

200242	10	危険	サン・マイクロシステムズサイバートラスト株式会社 RealVNC レッドハット	-	RealVNC VNC Viewer コンポーネントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4770	2010-05-20 18:03	2009-01-16	Show	GitHub Exploit DB Packet Storm

200243	4.9	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1032	2010-05-19 17:57	2010-04-16	Show	GitHub Exploit DB Packet Storm

200244	9.3	危険	アドビシステムズ	-	複数の Adobe 製品などで利用される Adobe Download Manager におけるバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1278	2010-05-19 17:57	2010-04-15	Show	GitHub Exploit DB Packet Storm

200245	5	警告	The Perl Foundation	-	Perl における UTF-8 文字列の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3626	2010-05-19 17:57	2009-10-29	Show	GitHub Exploit DB Packet Storm

200246	9.3	危険	サン・マイクロシステムズ	-	Java NPAPI plugin および Java Deployment Toolkit における任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-1423	2010-05-19 17:56	2010-04-15	Show	GitHub Exploit DB Packet Storm

200247	4.3	警告	ISC, Inc. サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	BIND 9 の DNSSEC 検証コードに脆弱性	CWE-Other その他	CVE-2010-0097	2010-05-19 17:42	2010-01-20	Show	GitHub Exploit DB Packet Storm

200248	9.3	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の erf ファイル処理に脆弱性	CWE-189 数値処理の問題	CVE-2009-3829	2010-05-19 17:42	2009-10-7	Show	GitHub Exploit DB Packet Storm

200249	10	危険	アップル	-	Apple Mac OS X 上で稼働する Safari における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1120	2010-05-18 16:39	2010-03-25	Show	GitHub Exploit DB Packet Storm

200250	6.9	警告	KDE project サイバートラスト株式会社レッドハット	-	KDE の KDM における制御ソケットの処理に関する権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0436	2010-05-18 16:39	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 7, 2024, 8:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1291	4.3	MEDIUM Network	wedevs	happy_addons_for_elementor	The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possibl…	NVD-CWE-noinfo	CVE-2024-8801	2024-09-30 23:23	2024-09-25	Show	GitHub Exploit DB Packet Storm

1292	5.4	MEDIUM Network	gcsdesign	wp_category_dropdown	The WP Category Dropdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 1.8 due to insufficient input sanitization a…	CWE-79 Cross-site Scripting	CVE-2024-8103	2024-09-30 23:20	2024-09-25	Show	GitHub Exploit DB Packet Storm

1293	7.5	HIGH Network	boldgrid	w3_total_cache	The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visibl…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2023-5359	2024-09-30 23:19	2024-09-25	Show	GitHub Exploit DB Packet Storm

1294	5.3	MEDIUM Network	peepso	peepso	The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 6.4.6.0. This is due…	CWE-209 Information Exposure Through an Error Message	CVE-2024-7426	2024-09-30 23:17	2024-09-25	Show	GitHub Exploit DB Packet Storm

1295	6.5	MEDIUM Network	kimhuebel	blogintroduction-wordpress-plugin	The blogintroduction-wordpress-plugin WordPress plugin through 0.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them vi…	CWE-352 Origin Validation Error	CVE-2024-7862	2024-09-30 23:15	2024-09-12	Show	GitHub Exploit DB Packet Storm

1296	8.3	HIGH Network	proges	sensor_net_connect_firmware_v2	A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a…	CWE-352 Origin Validation Error	CVE-2024-3083	2024-09-30 23:15	2024-07-31	Show	GitHub Exploit DB Packet Storm

1297	6.1	MEDIUM Network	proges	sensor_net_connect_firmware_v2	A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users to permanently inject arbitrary Javascript code.	CWE-79 Cross-site Scripting	CVE-2024-31199	2024-09-30 23:15	2024-07-31	Show	GitHub Exploit DB Packet Storm

1298	6.5	MEDIUM Network	ibm	storage_defender	IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an…	CWE-295 Improper Certificate Validation	CVE-2024-38324	2024-09-30 23:10	2024-09-25	Show	GitHub Exploit DB Packet Storm

1299	5.3	MEDIUM Network	tinfoilsecurity	devise-two-factor	Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. Using a shared secret…	CWE-331 Insufficient Entropy	CVE-2024-8796	2024-09-30 23:10	2024-09-18	Show	GitHub Exploit DB Packet Storm

1300	6.5	MEDIUM Network	rubayathasan	infolinks_ad_wrap	The infolinks Ad Wrap WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack	CWE-352 Origin Validation Error	CVE-2024-8044	2024-09-30 23:03	2024-09-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed