Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 20, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201641 5.5 警告 オラクル - Oracle Industry Applications の InForm コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0855 2011-05-17 09:45 2011-04-19 Show GitHub Exploit DB Packet Storm
201642 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0854 2011-05-17 09:44 2011-04-19 Show GitHub Exploit DB Packet Storm
201643 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0853 2011-05-17 09:43 2011-04-19 Show GitHub Exploit DB Packet Storm
201644 5.5 警告 オラクル - Oracle PeopleSoft Enterprise ELS における Enterprise Learning Mgmt に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0851 2011-05-17 09:41 2011-04-19 Show GitHub Exploit DB Packet Storm
201645 5.5 警告 オラクル - Oracle PeopleSoft Enterprise CRM における Order Capture に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0850 2011-05-17 09:28 2011-04-19 Show GitHub Exploit DB Packet Storm
201646 4.3 警告 オラクル - Oracle Java Dynamic Management Kit の HTML Adaptor における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0849 2011-05-17 09:27 2011-04-19 Show GitHub Exploit DB Packet Storm
201647 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2769 2011-05-17 09:01 2010-09-7 Show GitHub Exploit DB Packet Storm
201648 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品におけるクロスサイトスクリプティングに対する保護メカニズムを回避される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2768 2011-05-17 09:00 2010-09-7 Show GitHub Exploit DB Packet Storm
201649 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2764 2011-05-17 08:59 2010-09-7 Show GitHub Exploit DB Packet Storm
201650 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - Mozilla 製品の SafeJSObjectWrapper 実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2762 2011-05-17 08:56 2010-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 20, 2024, 4:18 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 7.8 HIGH
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti… NVD-CWE-noinfo
CVE-2024-49558 2024-11-16 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
1262 8.8 HIGH
Network 		anisha job_recruitment A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulat… CWE-89
SQL Injection 		CVE-2024-11127 2024-11-16 02:29 2024-11-13 Show GitHub Exploit DB Packet Storm
1263 7.5 HIGH
Network 		eclipse mosquitto In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "U… CWE-416
CWE-401
CWE-755
 Use After Free
 Missing Release of Memory after Effective Lifetime
 Improper Handling of Exceptional Conditions 		CVE-2024-8376 2024-11-16 02:21 2024-10-12 Show GitHub Exploit DB Packet Storm
1264 5.4 MEDIUM
Network 		nicheaddons sales_page_addon Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Sales Page Addon – Elementor & Beaver Builder allows Stored XSS.This issue aff… CWE-79
Cross-site Scripting 		CVE-2024-51585 2024-11-16 02:17 2024-11-10 Show GitHub Exploit DB Packet Storm
1265 5.4 MEDIUM
Network 		modernaweb black_widgets_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black W… CWE-79
Cross-site Scripting 		CVE-2024-51662 2024-11-16 02:16 2024-11-9 Show GitHub Exploit DB Packet Storm
1266 5.4 MEDIUM
Network 		rafelsanso gmap_point_list Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rafel Sansó Gmap Point List allows Stored XSS.This issue affects Gmap Point List: from n/a… CWE-79
Cross-site Scripting 		CVE-2024-51594 2024-11-16 02:15 2024-11-10 Show GitHub Exploit DB Packet Storm
1267 4.3 MEDIUM
Network 		github enterprise_server An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user who clicks on the U… NVD-CWE-noinfo
CVE-2024-9539 2024-11-16 02:15 2024-10-12 Show GitHub Exploit DB Packet Storm
1268 4.8 MEDIUM
Network 		mendix mendix A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12… CWE-362
Race Condition 		CVE-2024-50313 2024-11-16 02:12 2024-11-12 Show GitHub Exploit DB Packet Storm
1269 4.4 MEDIUM
Local 		lollms lollms A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the v… CWE-23
 Relative Path Traversal 		CVE-2024-6985 2024-11-16 02:10 2024-10-12 Show GitHub Exploit DB Packet Storm
1270 5.4 MEDIUM
Network 		mysticalthemes meta_store_elements Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bnayawpguy Meta Store Elements allows DOM-Based XSS.This issue affects Meta Store Elements… CWE-79
Cross-site Scripting 		CVE-2024-51592 2024-11-16 02:04 2024-11-10 Show GitHub Exploit DB Packet Storm