Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 1, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203461 4.9 警告 オラクル - Oracle Solaris における Kernel/Performance Counter BackEnd Module の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3542 2011-10-27 16:10 2011-10-18 Show GitHub Exploit DB Packet Storm
203462 5.6 警告 オラクル - Oracle Solaris における Process File System (procfs) の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3515 2011-10-27 16:09 2011-10-18 Show GitHub Exploit DB Packet Storm
203463 9.3 危険 オラクル - Oracle Solaris における LDAP library の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3508 2011-10-27 16:09 2011-10-18 Show GitHub Exploit DB Packet Storm
203464 4.3 警告 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2313 2011-10-27 16:08 2011-10-18 Show GitHub Exploit DB Packet Storm
203465 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Supplier Collaboration for Process コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3532 2011-10-27 16:06 2011-10-18 Show GitHub Exploit DB Packet Storm
203466 4.3 警告 オラクル - Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2323 2011-10-27 10:07 2011-10-18 Show GitHub Exploit DB Packet Storm
203467 4.3 警告 オラクル - Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性 CWE-noinfo
情報不足 		CVE-2011-2309 2011-10-27 10:07 2011-10-18 Show GitHub Exploit DB Packet Storm
203468 6.8 警告 オラクル - Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3538 2011-10-27 10:06 2011-10-18 Show GitHub Exploit DB Packet Storm
203469 5.5 警告 オラクル - Oracle Linux の Oracle Validated 処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2306 2011-10-27 10:05 2011-10-19 Show GitHub Exploit DB Packet Storm
203470 2.1 注意 オラクル - 複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3522 2011-10-27 10:04 2011-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 1, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 3.7 LOW
Network 		- - The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, a… CWE-862
 Missing Authorization 		CVE-2024-12300 2024-12-13 13:15 2024-12-13 Show GitHub Exploit DB Packet Storm
2012 6.5 MEDIUM
Network 		- - The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.8 due to insufficient escaping on the user sup… CWE-89
SQL Injection 		CVE-2019-25221 2024-12-13 13:15 2024-12-13 Show GitHub Exploit DB Packet Storm
2013 - - - A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password. - CVE-2024-12603 2024-12-13 12:15 2024-12-13 Show GitHub Exploit DB Packet Storm
2014 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-54118 2024-12-13 11:15 2024-12-12 Show GitHub Exploit DB Packet Storm
2015 7.8 HIGH
Local 		- - Windows Common Log File System Driver Elevation of Privilege Vulnerability CWE-122
Heap-based Buffer Overflow 		CVE-2024-49138 2024-12-13 11:00 2024-12-12 Show GitHub Exploit DB Packet Storm
2016 5.4 MEDIUM
Network 		adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable … CWE-79
Cross-site Scripting 		CVE-2024-52854 2024-12-13 10:50 2024-12-11 Show GitHub Exploit DB Packet Storm
2017 5.4 MEDIUM
Network 		adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable … CWE-79
Cross-site Scripting 		CVE-2024-52853 2024-12-13 10:47 2024-12-11 Show GitHub Exploit DB Packet Storm
2018 - - - Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code. CWE-125
Out-of-bounds Read 		CVE-2024-9508 2024-12-13 10:15 2024-12-13 Show GitHub Exploit DB Packet Storm
2019 - - - The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures… CWE-125
Out-of-bounds Read 		CVE-2024-12212 2024-12-13 10:15 2024-12-13 Show GitHub Exploit DB Packet Storm
2020 - - - Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary server to terminate… - CVE-2024-12289 2024-12-13 08:15 2024-12-13 Show GitHub Exploit DB Packet Storm