Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 3, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200591	10	危険	アドビシステムズ	-	Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3792	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

200592	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3791	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

200593	5.8	警告	PostgreSQL.org ターボリナックスサン・マイクロシステムズ	-	PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4034	2010-01-26 11:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

200594	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4031	2010-01-26 11:47	2009-11-29	Show	GitHub Exploit DB Packet Storm

200595	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3613	2010-01-26 11:38	2009-10-19	Show	GitHub Exploit DB Packet Storm

200596	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の NFSv4 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3286	2010-01-26 11:38	2009-09-22	Show	GitHub Exploit DB Packet Storm

200597	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-2908	2010-01-26 11:38	2009-10-13	Show	GitHub Exploit DB Packet Storm

200598	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2009-2695	2010-01-26 11:38	2009-08-28	Show	GitHub Exploit DB Packet Storm

200599	9.3	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	JDK および JRE の Sun Java SE にある Deployment Toolkit プラグインにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3865	2010-01-26 11:37	2009-11-3	Show	GitHub Exploit DB Packet Storm

200600	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の tc_fill_tclass 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3228	2010-01-26 11:37	2009-10-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 3, 2024, 4:11 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
81	7.5	HIGH Network	wpexpertsio	change_wp_admin_login	The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. Update	-	CVE-2023-3604	2024-10-3 03:35	2023-08-22	Show	GitHub Exploit DB Packet Storm

82	9.8	CRITICAL Network	apache	eventmesh	CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send contro… Update	CWE-502 Deserialization of Untrusted Data	CVE-2023-26512	2024-10-3 03:35	2023-07-17	Show	GitHub Exploit DB Packet Storm

83	6.1	MEDIUM Network	ninjaforms	ninja_forms	The Ninja Forms Contact Form plugin for WordPress is vulnerable to Reflected Self-Based Cross-Site Scripting via the 'Referer' header in all versions up to, and including, 3.8.15 due to insufficient … Update	CWE-79 Cross-site Scripting	CVE-2024-3866	2024-10-3 03:26	2024-09-25	Show	GitHub Exploit DB Packet Storm

84	8.8	HIGH Network	wclovers	frontend_manager_for_woocommerce_along_with_bookings_subscription_listings_compatible	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl… Update	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-8290	2024-10-3 03:23	2024-09-25	Show	GitHub Exploit DB Packet Storm

85	-		-	-	A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special … New	-	CVE-2024-24122	2024-10-3 03:15	2024-10-3	Show	GitHub Exploit DB Packet Storm

86	5.4	MEDIUM Network	braginteractive	material_design_icons	The Material Design Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mdi-icon shortcode in all versions up to, and including, 0.0.5 due to insufficient input s… Update	CWE-79 Cross-site Scripting	CVE-2024-9024	2024-10-3 03:02	2024-09-25	Show	GitHub Exploit DB Packet Storm

87	7.3	HIGH Network	blogcoding	special_text_boxes	The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.2. This is due to the plugin adding the filter add_filter('com… Update	CWE-94 Code Injection	CVE-2024-8481	2024-10-3 02:59	2024-09-25	Show	GitHub Exploit DB Packet Storm

88	7.5	HIGH Network	jianbo	rest_api_to_miniprogram	The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments REST API endpoint in all versions up to… Update	CWE-89 SQL Injection	CVE-2024-8484	2024-10-3 02:44	2024-09-25	Show	GitHub Exploit DB Packet Storm

89	4.8	MEDIUM Network	technowich	wp_ulike	The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even… Update	CWE-79 Cross-site Scripting	CVE-2024-6094	2024-10-3 02:44	2024-07-24	Show	GitHub Exploit DB Packet Storm

90	5.4	MEDIUM Network	technowich	wp_ulike	Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike – Most Advanced WordPress Marketing Toolkit plugin <= 4.6.8 versions. Update	CWE-79 Cross-site Scripting	CVE-2023-45640	2024-10-3 02:44	2023-10-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed