Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 9, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207071 4.3 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS		 - Apple Mac OS X の CUPS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2820 2010-08-12 17:29 2009-11-9 Show GitHub Exploit DB Packet Storm
207072 9.3 危険 アップル - Apple iTunes におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1777 2010-08-11 18:31 2010-07-19 Show GitHub Exploit DB Packet Storm
207073 2.6 注意 ISC, Inc. - BIND におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0213 2010-08-11 18:30 2010-07-15 Show GitHub Exploit DB Packet Storm
207074 5 警告 ISC, Inc. - ISC DHCP にサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-2156 2010-08-11 18:29 2010-07-15 Show GitHub Exploit DB Packet Storm
207075 6.8 警告 サイバートラスト株式会社
MUSCLE
レッドハット		 - MUSCLE PCSC-Lite の MSGFunctionDemarshall 関数におけるバッファオーバーフロー脆弱性 CWE-119
バッファエラー 		CVE-2010-0407 2010-08-10 18:50 2010-06-18 Show GitHub Exploit DB Packet Storm
207076 2.1 注意 サイバートラスト株式会社
MUSCLE
レッドハット		 - MUSCLE PCSC-Lite の MSGFunctionDemarshall 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4901 2010-08-10 18:50 2010-06-18 Show GitHub Exploit DB Packet Storm
207077 7.6 危険 ヒューレット・パッカード
IBM
オラクル		 - Oracle Solaris の ToolTalk における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0083 2010-08-10 18:50 2010-07-13 Show GitHub Exploit DB Packet Storm
207078 7.8 危険 サイバートラスト株式会社
Avahi
レッドハット		 - Avahi の originates_from_local_legacy_unicast_socket 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0758 2010-08-10 18:49 2009-03-3 Show GitHub Exploit DB Packet Storm
207079 6.8 警告 サン・マイクロシステムズ
68k.org		 - audiofile の msadpcm.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5824 2010-08-10 18:49 2009-01-2 Show GitHub Exploit DB Packet Storm
207080 2.4 注意 オラクル - Oracle Sun Java System Application Server および Oracle GlassFish Enterprise Server の GUI における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2397 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 9, 2025, 4:56 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Abdul Hakeem Build App Online allows PHP Local File Inclusion.This issue affec… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2024-49649 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
352 - - - Incorrect Privilege Assignment vulnerability in AllAccessible Team Accessibility by AllAccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through 1.3.4. New CWE-266
 Incorrect Privilege Assignment 		CVE-2024-49644 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
353 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress allows Reflected XSS.This issue affects DirectoryPress: from n/a thr… New CWE-79
Cross-site Scripting 		CVE-2024-49633 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
354 - - - Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservati… New CWE-352
 Origin Validation Error 		CVE-2024-49294 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
355 - - - Path Traversal vulnerability in SMSA Express SMSA Shipping allows Path Traversal.This issue affects SMSA Shipping: from n/a through 2.3. New CWE-35
 Path Traversal: '.../...//' 		CVE-2024-49249 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
356 - - - Deserialization of Untrusted Data vulnerability in Amento Tech Pvt ltd WPGuppy allows Object Injection.This issue affects WPGuppy: from n/a through 1.1.0. New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49222 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
357 - - - Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGlow JobBoard Job listing allows Upload a Web Shell to a Web Server.This issue affects JobBoard Job listing: from n/a through 1.2… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-43243 2025-01-7 20:15 2025-01-7 Show GitHub Exploit DB Packet Storm
358 4.3 MEDIUM
Network 		- - The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subfolders' function in all versions up to, … New CWE-862
 Missing Authorization 		CVE-2024-12719 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm
359 6.4 MEDIUM
Network 		- - The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it p… New CWE-79
Cross-site Scripting 		CVE-2024-12699 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm
360 7.5 HIGH
Network 		- - The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for… New CWE-22
Path Traversal 		CVE-2024-12152 2025-01-7 19:15 2025-01-7 Show GitHub Exploit DB Packet Storm