Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 24, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203111 6 警告 Mahara - Mahara における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4118 2011-11-16 15:11 2011-11-3 Show GitHub Exploit DB Packet Storm
203112 4 警告 Mahara - Mahara における異なるユーザのメッセージを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-2774 2011-11-16 15:08 2011-11-3 Show GitHub Exploit DB Packet Storm
203113 6.8 警告 Mahara - Mahara におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-2773 2011-11-16 15:07 2011-11-3 Show GitHub Exploit DB Packet Storm
203114 5 警告 Mahara - Mahara の get_dataroot_image_path 関数におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2772 2011-11-16 15:07 2011-11-3 Show GitHub Exploit DB Packet Storm
203115 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2771 2011-11-16 15:06 2011-11-3 Show GitHub Exploit DB Packet Storm
203116 9.3 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-362
競合状態 		CVE-2011-0784 2011-11-16 10:09 2011-02-3 Show GitHub Exploit DB Packet Storm
203117 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0783 2011-11-16 10:09 2011-02-3 Show GitHub Exploit DB Packet Storm
203118 5 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0782 2011-11-16 10:08 2011-02-3 Show GitHub Exploit DB Packet Storm
203119 7.5 危険 Google - Google Chrome の autofill プロファイルのマージ処理における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0781 2011-11-16 10:08 2011-02-3 Show GitHub Exploit DB Packet Storm
203120 9.3 危険 Google - Google Chrome の PDF イベントハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0780 2011-11-16 10:07 2011-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 24, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2261 4.4 MEDIUM
Network 		- - The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.1 due to insufficient… CWE-79
Cross-site Scripting 		CVE-2024-9769 2024-12-6 13:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2262 6.1 MEDIUM
Network 		- - The Flixita theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.0.82 due to insufficient input sanitization and output e… CWE-79
Cross-site Scripting 		CVE-2024-10836 2024-12-6 13:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2263 7.2 HIGH
Network 		- - The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versions up to, and including, 2.4.2 due to i… CWE-89
SQL Injection 		CVE-2024-10247 2024-12-6 13:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2264 4.3 MEDIUM
Network 		- - Microsoft Edge (Chromium-based) Spoofing Vulnerability CWE-449
 The UI Performs the Wrong Action 		CVE-2024-49041 2024-12-6 11:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2265 - - - In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs. - CVE-2024-11149 2024-12-6 11:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2266 - - - Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured. - CVE-2024-6219 2024-12-6 09:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2267 - - - Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store. - CVE-2024-6156 2024-12-6 09:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2268 - - - path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-52798 2024-12-6 08:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2269 - - - Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl p… - CVE-2024-30962 2024-12-6 08:15 2024-12-6 Show GitHub Exploit DB Packet Storm
2270 - - - sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a che… CWE-20
 Improper Input Validation  		CVE-2024-54140 2024-12-6 07:15 2024-12-6 Show GitHub Exploit DB Packet Storm