Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 5, 2024, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202611 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0883 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
202612 2.1 注意 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0890 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
202613 3.6 注意 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0895 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
202614 4.3 警告 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0893 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
202615 4.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0453 2010-05-14 18:42 2010-02-3 Show GitHub Exploit DB Packet Storm
202616 4.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0889 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
202617 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Management Center コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0891 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
202618 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0894 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
202619 6.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0885 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
202620 7.1 危険 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0896 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 6, 2024, 5:21 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 - - - A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/t… New CWE-79
Cross-site Scripting 		CVE-2024-10747 2024-11-4 09:15 2024-11-4 Show GitHub Exploit DB Packet Storm
1092 - - - A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. This affects an unknown part of the file /admin/assets/plugins/DataTables/media/unit_testing/templat… New - CVE-2024-10746 2024-11-4 09:15 2024-11-4 Show GitHub Exploit DB Packet Storm
1093 7.1 HIGH
Local 		mapshaper mapshaper The attacker may exploit a path traversal vulnerability leading to information disclosure. Update CWE-22
Path Traversal 		CVE-2024-1163 2024-11-4 04:15 2024-02-14 Show GitHub Exploit DB Packet Storm
1094 6.5 MEDIUM
Network 		lunary lunary An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' p… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-7473 2024-11-4 02:15 2024-10-29 Show GitHub Exploit DB Packet Storm
1095 7.1 HIGH
Network 		lollms lollms_web_ui A vulnerability in parisneo/lollms-webui version 9.8 allows for a Denial of Service (DOS) attack when uploading an audio file. If an attacker appends a large number of characters to the end of a mult… Update CWE-352
 Origin Validation Error 		CVE-2024-6959 2024-11-4 02:15 2024-10-13 Show GitHub Exploit DB Packet Storm
1096 2.7 LOW
Network 		openwebui open_webui An information disclosure vulnerability exists in open-webui version 0.3.8. The vulnerability is related to the embedding model update feature under admin settings. When a user updates the model path… Update CWE-209
Information Exposure Through an Error Message 		CVE-2024-7038 2024-11-4 02:15 2024-10-10 Show GitHub Exploit DB Packet Storm
1097 4.3 MEDIUM
Network 		lunary lunary A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view … Update CWE-306
Missing Authentication for Critical Function 		CVE-2024-6582 2024-11-4 02:15 2024-09-14 Show GitHub Exploit DB Packet Storm
1098 6.5 MEDIUM
Network 		lunary lunary An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting versions up to and including 1.2.2. The vulnerability allows unauthorized users to view any prompts in an… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-5131 2024-11-4 02:15 2024-06-7 Show GitHub Exploit DB Packet Storm
1099 6.5 MEDIUM
Network 		lunary lunary In lunary-ai/lunary version 1.2.5, an improper access control vulnerability exists due to a missing permission check in the `GET /v1/users/me/org` endpoint. The platform's role definitions restrict t… Update CWE-862
 Missing Authorization 		CVE-2024-5248 2024-11-4 02:15 2024-06-7 Show GitHub Exploit DB Packet Storm
1100 7.5 HIGH
Network 		lunary lunary An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows unauthenticated users to delete any dataset. The vulnerability is due to the lack … Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-5130 2024-11-4 02:15 2024-06-7 Show GitHub Exploit DB Packet Storm