Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 19, 2024, 12:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202451	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングを誘導される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1210	2010-12-21 16:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

202452	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の XMLDocument::load 関数におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0182	2010-12-21 16:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

202453	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0179	2010-12-21 16:10	2010-03-30	Show	GitHub Exploit DB Packet Storm

202454	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0178	2010-12-21 16:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

202455	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0176	2010-12-21 16:06	2010-03-30	Show	GitHub Exploit DB Packet Storm

202456	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeSelection の実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0175	2010-12-21 16:02	2010-03-30	Show	GitHub Exploit DB Packet Storm

202457	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0174	2010-12-21 16:01	2010-03-30	Show	GitHub Exploit DB Packet Storm

202458	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0173	2010-12-21 16:00	2010-03-30	Show	GitHub Exploit DB Packet Storm

202459	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Thunderbird/SeaMonkey における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0163	2010-12-21 15:59	2010-03-16	Show	GitHub Exploit DB Packet Storm

202460	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash に脆弱性	CWE-noinfo 情報不足	CVE-2010-2884	2010-12-21 15:57	2010-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 19, 2024, 5:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2011	9.8	CRITICAL Network	-	-	The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to,…	CWE-862 Missing Authorization	CVE-2024-10586	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2012	6.5	MEDIUM Network	-	-	The CE21 Suite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ce21_single_sign_on_save_api_settings' function in versions up to, and…	CWE-862 Missing Authorization	CVE-2024-10294	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2013	9.8	CRITICAL Network	-	-	The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attack…	CWE-200 Information Exposure	CVE-2024-10285	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2014	-		-	-	The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0. This is due to hardcoded encryption key in the 'ce21_authentication_phrase' functio…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2024-10284	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2015	-		-	-	A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able to extract user data from data.all application logs in data.all via CloudWatch log…	-	CVE-2024-52314	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2016	-		-	-	An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by di…	-	CVE-2024-52313	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2017	-		-	-	Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.	-	CVE-2024-52312	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2018	-		-	-	Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of authorized API Requests until token is expired.	-	CVE-2024-52311	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2019	-		-	-	An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of.	-	CVE-2024-10953	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

2020	-		-	-	Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs contains GitHub credentials (tokens `ghs_...`) when they are rotated. This enab…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2024-52009	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm