Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 2, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200491 7.8 危険 Mozilla Foundation - Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3987 2010-01-29 09:54 2009-12-15 Show GitHub Exploit DB Packet Storm
200492 7.6 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3986 2010-01-29 09:54 2009-12-15 Show GitHub Exploit DB Packet Storm
200493 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3985 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
200494 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3984 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
200495 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 CWE-Other
その他 		CVE-2009-3983 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
200496 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3389 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
200497 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3388 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
200498 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3982 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
200499 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3981 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
200500 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3980 2010-01-28 12:15 2009-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 2, 2024, 4:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2271 5.9 MEDIUM
Network 		consensys gnark-crypto gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses in Groth16 as implemented break the zero-knowledge property… NVD-CWE-noinfo
CVE-2024-45040 2024-09-20 09:13 2024-09-6 Show GitHub Exploit DB Packet Storm
2272 6.2 MEDIUM
Local 		consensys gnark-crypto gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover … NVD-CWE-noinfo
CVE-2024-45039 2024-09-20 09:12 2024-09-6 Show GitHub Exploit DB Packet Storm
2273 8.8 HIGH
Network 		thimpress wp_events_manager The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user su… CWE-89
SQL Injection 		CVE-2024-7717 2024-09-20 09:08 2024-08-31 Show GitHub Exploit DB Packet Storm
2274 5.3 MEDIUM
Network 		wpcerber cerber_security_antispam_\&_malware_scan The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it … NVD-CWE-noinfo
CVE-2022-4100 2024-09-20 09:08 2024-08-31 Show GitHub Exploit DB Packet Storm
2275 5.3 MEDIUM
Network 		youtag ip-vault-wp-firewall The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address informatio… NVD-CWE-Other
CVE-2022-4536 2024-09-20 09:04 2024-08-31 Show GitHub Exploit DB Packet Storm
2276 6.3 MEDIUM
Network 		microsoft edge_chromium Microsoft Edge (HTML-based) Memory Corruption Vulnerability CWE-787
 Out-of-bounds Write 		CVE-2024-38207 2024-09-20 07:15 2024-08-24 Show GitHub Exploit DB Packet Storm
2277 7.8 HIGH
Local 		microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-125
Out-of-bounds Read 		CVE-2024-38210 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
2278 7.8 HIGH
Local 		microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-843
Type Confusion 		CVE-2024-38209 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
2279 6.1 MEDIUM
Network 		microsoft edge Microsoft Edge for Android Spoofing Vulnerability CWE-79
Cross-site Scripting 		CVE-2024-38208 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
2280 5.4 MEDIUM
Network 		averta auxinportfolio The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aux_recent_portfolios_grid' shortcode in all versions up to, and inc… CWE-79
Cross-site Scripting 		CVE-2024-1384 2024-09-20 07:13 2024-08-29 Show GitHub Exploit DB Packet Storm