Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 7, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 5.4 警告
Network 		themexclub oneelements themexclub の WordPress 用 oneelements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-9068 2024-10-3 11:22 2024-09-25 Show GitHub Exploit DB Packet Storm
212 5.4 警告
Network 		gutengeek free gutenberg blocks gutengeek の WordPress 用 free gutenberg blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-9073 2024-10-3 11:22 2024-09-25 Show GitHub Exploit DB Packet Storm
213 9.8 緊急
Network 		code-projects blood bank system code-projects の blood bank system における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-9327 2024-10-3 11:22 2024-09-29 Show GitHub Exploit DB Packet Storm
214 7.5 重要
Network 		minapper rest api to miniprogram jianbo の WordPress 用 rest api to miniprogram における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-8484 2024-10-3 11:21 2024-09-25 Show GitHub Exploit DB Packet Storm
215 6.1 警告
Network 		xtendify simple calendar xtendify の WordPress 用 simple calendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-8549 2024-10-3 11:21 2024-09-25 Show GitHub Exploit DB Packet Storm
216 6.1 警告
Network 		pierros kodex posts likes pierros の WordPress 用 kodex posts likes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-8713 2024-10-3 11:21 2024-09-25 Show GitHub Exploit DB Packet Storm
217 5.4 警告
Network 		wangbin 012 ps multi languages wangbin の WordPress 用 012 ps multi languages におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-8723 2024-10-3 11:21 2024-09-26 Show GitHub Exploit DB Packet Storm
218 7.2 重要
Network 		freelancer-coder wordpress simple html sitemap freelancer-coder の WordPress 用 wordpress simple html sitemap における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-7385 2024-10-3 11:20 2024-09-25 Show GitHub Exploit DB Packet Storm
219 9.8 緊急
Network 		Artbees jupiter x core Artbees の WordPress 用 jupiter x core における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-7772 2024-10-3 11:20 2024-09-26 Show GitHub Exploit DB Packet Storm
220 7.8 重要
Local 		AVG Technologies AVG Internet Security AVG Technologies の Windows 用 AVG Internet Security における制御されていない検索パスの要素に関する脆弱性 CWE-427
CWE-427
CWE-732
CWE-749
CVE-2024-6510 2024-10-3 11:04 2024-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 8:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258611 - juniper idp Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2009-5086 2011-10-26 11:45 2011-09-3 Show GitHub Exploit DB Packet Storm
258612 - ffmpeg ffmpeg oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted… CWE-189
Numeric Errors 		CVE-2009-4632 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258613 - ffmpeg ffmpeg vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via… CWE-189
Numeric Errors 		CVE-2009-4633 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258614 - ffmpeg ffmpeg Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec… CWE-189
Numeric Errors 		CVE-2009-4634 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258615 - ffmpeg ffmpeg FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to us… CWE-94
Code Injection 		CVE-2009-4635 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258616 - ffmpeg ffmpeg FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop. CWE-94
Code Injection 		CVE-2009-4636 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258617 - ffmpeg ffmpeg The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error. CWE-189
Numeric Errors 		CVE-2009-4639 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258618 - ffmpeg ffmpeg Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Vorbis file that triggers an out-of-bounds read. CWE-189
Numeric Errors 		CVE-2009-4640 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
258619 - simplemachines smf Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involv… CWE-352
 Origin Validation Error 		CVE-2011-4173 2011-10-25 13:00 2011-10-25 Show GitHub Exploit DB Packet Storm
258620 - plone
zope 		plone
zope 		Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the… NVD-CWE-noinfo
CVE-2011-3587 2011-10-21 11:56 2011-10-10 Show GitHub Exploit DB Packet Storm