Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 20, 2024, 2:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201571	3.5	注意	オラクル	-	Oracle PeopleSoft Enterprise の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0856	2011-05-17 09:46	2011-04-20	Show	GitHub Exploit DB Packet Storm

201572	5.5	警告	オラクル	-	Oracle Industry Applications の InForm コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0855	2011-05-17 09:45	2011-04-19	Show	GitHub Exploit DB Packet Storm

201573	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0854	2011-05-17 09:44	2011-04-19	Show	GitHub Exploit DB Packet Storm

201574	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0853	2011-05-17 09:43	2011-04-19	Show	GitHub Exploit DB Packet Storm

201575	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise ELS における Enterprise Learning Mgmt に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0851	2011-05-17 09:41	2011-04-19	Show	GitHub Exploit DB Packet Storm

201576	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise CRM における Order Capture に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0850	2011-05-17 09:28	2011-04-19	Show	GitHub Exploit DB Packet Storm

201577	4.3	警告	オラクル	-	Oracle Java Dynamic Management Kit の HTML Adaptor における脆弱性	CWE-noinfo 情報不足	CVE-2011-0849	2011-05-17 09:27	2011-04-19	Show	GitHub Exploit DB Packet Storm

201578	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2769	2011-05-17 09:01	2010-09-7	Show	GitHub Exploit DB Packet Storm

201579	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングに対する保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2768	2011-05-17 09:00	2010-09-7	Show	GitHub Exploit DB Packet Storm

201580	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2764	2011-05-17 08:59	2010-09-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 20, 2024, 12:18 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1101	9.8	CRITICAL Network	lopalopa	e-learning_management_system	A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters. Update	CWE-89 SQL Injection	CVE-2024-50833	2024-11-19 01:38	2024-11-15	Show	GitHub Exploit DB Packet Storm

1102	7.2	HIGH Network	lopalopa	e-learning_management_system	A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters. Update	CWE-89 SQL Injection	CVE-2024-50831	2024-11-19 01:37	2024-11-15	Show	GitHub Exploit DB Packet Storm

1103	7.2	HIGH Network	lopalopa	e-learning_management_system	A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters. Update	CWE-89 SQL Injection	CVE-2024-50830	2024-11-19 01:37	2024-11-15	Show	GitHub Exploit DB Packet Storm

1104	7.2	HIGH Network	lopalopa	e-learning_management_system	A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter. Update	CWE-89 SQL Injection	CVE-2024-50829	2024-11-19 01:37	2024-11-15	Show	GitHub Exploit DB Packet Storm

1105	7.2	HIGH Network	lopalopa	e-learning_management_system	A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter. Update	CWE-89 SQL Injection	CVE-2024-50832	2024-11-19 01:37	2024-11-15	Show	GitHub Exploit DB Packet Storm

1106	5.4	MEDIUM Network	kendysond	selar.co_widget	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kendysond Selar.Co Widget allows DOM-Based XSS.This issue affects Selar.Co Widget: from n/… Update	CWE-79 Cross-site Scripting	CVE-2024-51598	2024-11-19 01:37	2024-11-10	Show	GitHub Exploit DB Packet Storm

1107	7.2	HIGH Network	lopalopa	e-learning_management_system	A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter. Update	CWE-89 SQL Injection	CVE-2024-50828	2024-11-19 01:36	2024-11-15	Show	GitHub Exploit DB Packet Storm

1108	7.2	HIGH Network	lopalopa	e-learning_management_system	A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter. Update	CWE-89 SQL Injection	CVE-2024-50827	2024-11-19 01:36	2024-11-15	Show	GitHub Exploit DB Packet Storm

1109	-		-	-	Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know… Update	CWE-22 Path Traversal	CVE-2024-42499	2024-11-19 01:35	2024-11-15	Show	GitHub Exploit DB Packet Storm

1110	-		-	-	zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Update Pa… Update	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-4311	2024-11-19 01:35	2024-11-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed