Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 20, 2024, 12:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203991	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の HTML パーサにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1571	2010-04-1 13:51	2010-02-17	Show	GitHub Exploit DB Packet Storm

203992	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0159	2010-04-1 13:50	2010-02-17	Show	GitHub Exploit DB Packet Storm

203993	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3979	2010-04-1 13:49	2009-12-15	Show	GitHub Exploit DB Packet Storm

203994	4.4	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox におけるダウンロードファイルを置き換えられる脆弱性	CWE-Other その他	CVE-2009-3274	2010-04-1 13:47	2009-09-21	Show	GitHub Exploit DB Packet Storm

203995	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における意図しないファイルをダウンロードさせられる脆弱性	CWE-16 環境設定	CVE-2009-3376	2010-04-1 13:46	2009-10-27	Show	GitHub Exploit DB Packet Storm

203996	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3380	2010-04-1 13:45	2009-10-27	Show	GitHub Exploit DB Packet Storm

203997	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3075	2010-04-1 13:44	2009-09-9	Show	GitHub Exploit DB Packet Storm

203998	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3072	2010-04-1 13:43	2009-09-9	Show	GitHub Exploit DB Packet Storm

203999	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox における任意の PKCS11 モジュールをインストール/削除させる脆弱性	CWE-Other その他	CVE-2009-3076	2010-04-1 13:42	2009-09-9	Show	GitHub Exploit DB Packet Storm

204000	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3077	2010-04-1 13:41	2009-09-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 20, 2024, 12:18 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2971	9.8	CRITICAL Network	contest-gallery	contest_gallery	The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection …	CWE-89 SQL Injection	CVE-2024-10687	2024-11-9 00:26	2024-11-5	Show	GitHub Exploit DB Packet Storm

2972	4.3	MEDIUM Network	wpxpro	xpro_addons_for_elementor	The 140+ Widgets \| Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets…	NVD-CWE-noinfo	CVE-2024-10319	2024-11-9 00:25	2024-11-5	Show	GitHub Exploit DB Packet Storm

2973	4.8	MEDIUM Network	10web	photo_gallery	The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.30 due to ins…	CWE-79 Cross-site Scripting	CVE-2024-9878	2024-11-9 00:25	2024-11-5	Show	GitHub Exploit DB Packet Storm

2974	8.8	HIGH Network	fileorganizer	fileorganizer	The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7985	2024-11-9 00:22	2024-10-30	Show	GitHub Exploit DB Packet Storm

2975	4.8	MEDIUM Network	robosoft	robo_gallery	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RoboSoft Robo Gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through …	CWE-79 Cross-site Scripting	CVE-2024-49696	2024-11-9 00:21	2024-10-24	Show	GitHub Exploit DB Packet Storm

2976	6.5	MEDIUM Network	63moons	aero wave_2.0	This vulnerability exists in the Wave 2.0 due to weak encryption of sensitive data received at the API response. An authenticated remote attacker could exploit this vulnerability by manipulating a pa…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2024-51556	2024-11-9 00:20	2024-11-4	Show	GitHub Exploit DB Packet Storm

2977	5.4	MEDIUM Network	spiffyplugins	wp_flow_plus	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a th…	CWE-79 Cross-site Scripting	CVE-2024-49695	2024-11-9 00:20	2024-10-24	Show	GitHub Exploit DB Packet Storm

2978	6.5	MEDIUM Network	63moons	aero wave_2.0	This vulnerability exists in the Wave 2.0 due to missing authorization check on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter “u…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-51559	2024-11-9 00:19	2024-11-4	Show	GitHub Exploit DB Packet Storm

2979	9.8	CRITICAL Network	63moons	aero wave_2.0	This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conduc…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2024-51558	2024-11-9 00:19	2024-11-4	Show	GitHub Exploit DB Packet Storm

2980	6.5	MEDIUM Network	63moons	aero wave_2.0	This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP re…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-51557	2024-11-9 00:19	2024-11-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed