Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 5, 2024, 6:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203061	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4003	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

203062	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4002	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

203063	6.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における競合状態の脆弱性	CWE-362 競合状態	CVE-2009-3547	2010-02-16 11:44	2009-11-3	Show	GitHub Exploit DB Packet Storm

203064	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の netlink サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2005-4881	2010-02-16 11:43	2009-10-19	Show	GitHub Exploit DB Packet Storm

203065	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の execve 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2848	2010-02-16 11:43	2009-08-18	Show	GitHub Exploit DB Packet Storm

203066	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_sigaltstack 関数における情報漏えいの脆弱性	CWE-noinfo 情報不足	CVE-2009-2847	2010-02-16 11:43	2009-08-18	Show	GitHub Exploit DB Packet Storm

203067	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の personality サブシステムにおける NULL ポインタ参照の脆弱性	CWE-16 環境設定	CVE-2009-1895	2010-02-16 11:43	2009-07-16	Show	GitHub Exploit DB Packet Storm

203068	4.3	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0069	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

203069	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0078	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

203070	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0074	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 5, 2024, 4:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
931	5.4	MEDIUM Network	ysoft	safeq	Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to…	CWE-79 Cross-site Scripting	CVE-2022-23861	2024-11-1 23:19	2024-10-23	Show	GitHub Exploit DB Packet Storm

932	8.8	HIGH Network	tendacn	a301_firmware	A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argum…	CWE-787 Out-of-bounds Write	CVE-2024-6189	2024-11-1 23:19	2024-06-20	Show	GitHub Exploit DB Packet Storm

933	7.5	HIGH Network	codepeople	wp_time_slots_booking_form	Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.	CWE-862 Missing Authorization	CVE-2024-33543	2024-11-1 23:16	2024-06-9	Show	GitHub Exploit DB Packet Storm

934	-		-	-	Access Control vulnerability in StylemixThemes MasterStudy LMS allows . This issue affects MasterStudy LMS: from n/a through 3.2.12.	CWE-862 Missing Authorization	CVE-2024-37094	2024-11-1 23:15	2024-11-1	Show	GitHub Exploit DB Packet Storm

935	5.3	MEDIUM Network	wpdeveloper	embedpress	Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.	CWE-862 Missing Authorization	CVE-2024-31274	2024-11-1 23:14	2024-06-9	Show	GitHub Exploit DB Packet Storm

936	9.8	CRITICAL Network	wiselyhub	js_help_desk	Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.	CWE-862 Missing Authorization	CVE-2024-31273	2024-11-1 23:11	2024-06-9	Show	GitHub Exploit DB Packet Storm

937	8.8	HIGH Network	wpdesk	flexible_checkout_fields	Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.	CWE-862 Missing Authorization	CVE-2024-31267	2024-11-1 23:10	2024-06-9	Show	GitHub Exploit DB Packet Storm

938	8.8	HIGH Network	tenda	rx9_pro_firmware	A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the function sub_4337EC of the file /goform/SetNetControlList. The ma…	CWE-787 Out-of-bounds Write	CVE-2024-10283	2024-11-1 23:08	2024-10-24	Show	GitHub Exploit DB Packet Storm

939	7.5	HIGH Network	tenda	ac15_firmware ac7_firmware ac10u_firmware ac500_firmware ac18_firmware ac9_firmware ac1206_firmware ac6_firmware ac10_firmware ac8_firmware	A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the…	CWE-476 NULL Pointer Dereference	CVE-2024-10280	2024-11-1 23:03	2024-10-23	Show	GitHub Exploit DB Packet Storm

940	4.3	MEDIUM Network	webfactoryltd	wp_force_ssl	The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_setting' function in versions up to, …	CWE-862 Missing Authorization	CVE-2024-5770	2024-11-1 23:02	2024-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed