Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207061 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0116 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
207062 9.3 危険 Artifex Software - Ghostscript の TrueType bytecode interpreter に脆弱性 CWE-189
数値処理の問題 		CVE-2009-3743 2010-09-16 15:42 2010-08-25 Show GitHub Exploit DB Packet Storm
207063 5 警告 Devon IT - Devon IT 製品に複数の脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-3122 2010-09-16 15:42 2010-08-25 Show GitHub Exploit DB Packet Storm
207064 6.4 警告 日立 - JP1/NETM/Remote Control Agent における認証を回避される脆弱性 CWE-287
不適切な認証 		- 2010-09-16 15:42 2010-08-31 Show GitHub Exploit DB Packet Storm
207065 6.8 警告 ヒューレット・パッカード - HP HP-UX の Software Distributor における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2712 2010-09-15 17:18 2010-08-25 Show GitHub Exploit DB Packet Storm
207066 6 警告 レッドハット - Red Hat Enterprise Linux の gdm におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2007-5079 2010-09-15 17:18 2007-09-25 Show GitHub Exploit DB Packet Storm
207067 9.3 危険 ImageMagick
GraphicsMagick
レッドハット		 - ImageMagick および GraphicsMagick の XMakeImage 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-1882 2010-09-15 17:17 2009-06-2 Show GitHub Exploit DB Packet Storm
207068 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-2794 2010-09-15 17:17 2010-08-25 Show GitHub Exploit DB Packet Storm
207069 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性 CWE-362
競合状態 		CVE-2010-2792 2010-09-15 17:13 2010-08-25 Show GitHub Exploit DB Packet Storm
207070 1.9 注意 シトリックス・システムズ - Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-2619 2010-09-14 15:55 2010-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
711 - - - Incorrect Privilege Assignment vulnerability in AllAccessible Team Accessibility by AllAccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through 1.3.4. CWE-266
 Incorrect Privilege Assignment 		CVE-2024-49644 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
712 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a thr… CWE-79
Cross-site Scripting 		CVE-2024-49633 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
713 - - - Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservati… CWE-352
 Origin Validation Error 		CVE-2024-49294 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
714 - - - Path Traversal vulnerability in SMSA Express SMSA Shipping allows Path Traversal.This issue affects SMSA Shipping: from n/a through 2.3. CWE-35
 Path Traversal: '.../...//' 		CVE-2024-49249 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
715 - - - Deserialization of Untrusted Data vulnerability in Amento Tech Pvt ltd WPGuppy allows Object Injection.This issue affects WPGuppy: from n/a through 1.1.0. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49222 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
716 - - - Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGlow JobBoard Job listing allows Upload a Web Shell to a Web Server.This issue affects JobBoard Job listing: from n/a through 1.2… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-43243 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
717 4.3 MEDIUM
Network 		- - The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subfolders' function in all versions up to, … CWE-862
 Missing Authorization 		CVE-2024-12719 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm
718 6.4 MEDIUM
Network 		- - The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it p… CWE-79
Cross-site Scripting 		CVE-2024-12699 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm
719 7.5 HIGH
Network 		- - The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for… CWE-22
Path Traversal 		CVE-2024-12152 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm
720 - - - : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1… - CVE-2024-11627 2025-01-7 18:15 2025-01-7 Show GitHub Exploit DB Packet Storm