Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 27, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202341 4 警告 オラクル - Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3509 2012-01-20 16:40 2012-01-17 Show GitHub Exploit DB Packet Storm
202342 4 警告 オラクル - Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2326 2012-01-20 16:39 2012-01-17 Show GitHub Exploit DB Packet Storm
202343 4 警告 オラクル - Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2325 2012-01-20 16:28 2012-01-17 Show GitHub Exploit DB Packet Storm
202344 4 警告 オラクル - Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2321 2012-01-20 16:27 2012-01-17 Show GitHub Exploit DB Packet Storm
202345 5 警告 オラクル - Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2324 2012-01-20 16:26 2012-01-17 Show GitHub Exploit DB Packet Storm
202346 3.5 注意 オラクル - Oracle E-Business Suite における Attachments / File Upload の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2271 2012-01-20 15:44 2012-01-17 Show GitHub Exploit DB Packet Storm
202347 4 警告 オラクル - Oracle E-Business Suite における REST Services の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0078 2012-01-20 15:43 2012-01-17 Show GitHub Exploit DB Packet Storm
202348 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Forms コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0073 2012-01-20 15:43 2012-01-17 Show GitHub Exploit DB Packet Storm
202349 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle WebCenter Content コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0084 2012-01-20 15:41 2012-01-17 Show GitHub Exploit DB Packet Storm
202350 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebCenter Content コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0085 2012-01-20 15:39 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 28, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 - - - gitingest before 9996a06 mishandles symbolic links that point outside of the base directory. - CVE-2024-56074 2024-12-17 01:15 2024-12-15 Show GitHub Exploit DB Packet Storm
1142 - - - Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: from n/a through 1.3. CWE-352
 Origin Validation Error 		CVE-2024-56015 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1143 - - - Authentication Bypass Using an Alternate Path or Channel vulnerability in Wovax, LLC. Wovax IDX allows Authentication Bypass.This issue affects Wovax IDX: from n/a through 1.2.2. CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-56013 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1144 - - - Cross-Site Request Forgery (CSRF) vulnerability in Pearlbells Flash News / Post (Responsive) allows Privilege Escalation.This issue affects Flash News / Post (Responsive): from n/a through 4.1. CWE-352
 Origin Validation Error 		CVE-2024-56012 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1145 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ilja Zaglov | IMBAA GmbH Responsive Google Maps | by imbaa allows Stored XSS.This issue affects R… CWE-79
Cross-site Scripting 		CVE-2024-56011 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1146 - - - Missing Authorization vulnerability in spreadr Spreadr Woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Spreadr Woocommerce: from n/a through 1.0.4. CWE-862
 Missing Authorization 		CVE-2024-56009 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1147 - - - Missing Authorization vulnerability in Ram Segev Leader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leader: from n/a through 2.6.1. CWE-862
 Missing Authorization 		CVE-2024-56007 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1148 - - - Cross-Site Request Forgery (CSRF) vulnerability in Posti Posti Shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through 3.10.3. CWE-352
 Origin Validation Error 		CVE-2024-56005 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1149 - - - Missing Authorization vulnerability in Alex W Fowler Easy Site Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through… CWE-862
 Missing Authorization 		CVE-2024-56004 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1150 - - - Missing Authorization vulnerability in Ksher Ksher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ksher: from n/a through 1.1.1. CWE-862
 Missing Authorization 		CVE-2024-56001 2024-12-17 00:15 2024-12-17 Show GitHub Exploit DB Packet Storm