Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 27, 2024, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202961 6.5 警告 シスコシステムズ - Cisco Unified Communications Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1607 2011-12-1 10:40 2011-04-27 Show GitHub Exploit DB Packet Storm
202962 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-1606 2011-12-1 10:38 2011-04-27 Show GitHub Exploit DB Packet Storm
202963 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-1605 2011-12-1 10:36 2011-04-27 Show GitHub Exploit DB Packet Storm
202964 7.1 危険 シスコシステムズ - Cisco Unified Communications Manager におけるメモリリークの脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1604 2011-12-1 10:35 2011-04-27 Show GitHub Exploit DB Packet Storm
202965 4.3 警告 John Godley - WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4562 2011-11-30 16:50 2011-11-28 Show GitHub Exploit DB Packet Storm
202966 4.3 警告 codefuture - CF Image Hosting Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4572 2011-11-30 16:38 2011-11-29 Show GitHub Exploit DB Packet Storm
202967 7.5 危険 EA Improved - Estate Agent コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4571 2011-11-30 16:37 2011-11-29 Show GitHub Exploit DB Packet Storm
202968 7.5 危険 Takeaweb - Time Returns コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4570 2011-11-30 16:37 2011-11-29 Show GitHub Exploit DB Packet Storm
202969 7.5 危険 tommykent1210 - MyBB Forum 用 Userbar プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4569 2011-11-30 16:36 2011-11-29 Show GitHub Exploit DB Packet Storm
202970 4.3 警告 WordPress.org - WordPress 用 Flowplayer プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4568 2011-11-30 16:35 2011-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 27, 2024, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 - - - Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to exec… CWE-94
Code Injection 		CVE-2024-54152 2024-12-11 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm
1932 - - - An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires a… - CVE-2024-10496 2024-12-11 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm
1933 - - - An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitatio… - CVE-2024-10495 2024-12-11 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm
1934 - - - An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacke… - CVE-2024-10494 2024-12-11 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm
1935 - - - The System Dashboard WordPress plugin before 2.8.15 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Script… - CVE-2024-11107 2024-12-11 01:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1936 - - - The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitra… - CVE-2024-10708 2024-12-11 01:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1937 - - - An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically proximate attackers or local admins to the w… - CVE-2024-53919 2024-12-11 01:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1938 5.4 MEDIUM
Network 		dedecms dedecms A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. … CWE-79
Cross-site Scripting 		CVE-2024-12183 2024-12-11 01:05 2024-12-5 Show GitHub Exploit DB Packet Storm
1939 7.8 HIGH
Local 		code-projects hotel_management_system A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handle… CWE-787
 Out-of-bounds Write 		CVE-2024-12185 2024-12-11 00:57 2024-12-5 Show GitHub Exploit DB Packet Storm
1940 7.8 HIGH
Local 		code-projects hotel_management_system A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room… CWE-787
 Out-of-bounds Write 		CVE-2024-12186 2024-12-11 00:52 2024-12-5 Show GitHub Exploit DB Packet Storm