Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 7, 2024, 12:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
61 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. G3 ファームウェア Tenda の g3 ファームウェアにおける OS コマンドインジェクションの脆弱性 New CWE-78
CWE-78
CVE-2024-46628 2024-10-7 09:54 2024-09-26 Show GitHub Exploit DB Packet Storm
62 5.4 警告
Network
websevendev attributes for blocks websevendev の WordPress 用 attributes for blocks におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-8318 2024-10-7 09:54 2024-09-4 Show GitHub Exploit DB Packet Storm
63 5.9 警告
Network
PLANET gs-4210-24p2s ファームウェア
igs-5225-4up1t2s ファームウェア
gs-4210-24pl4c ファームウェア
複数の PLANET 製品における暗号強度に関する脆弱性 New CWE-261
CWE-326
CVE-2024-8455 2024-10-7 09:54 2024-09-30 Show GitHub Exploit DB Packet Storm
64 9.8 緊急
Network
oceanicsoft valeapp oceanicsoft の valeapp における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-8607 2024-10-7 09:54 2024-09-27 Show GitHub Exploit DB Packet Storm
65 8.8 重要
Network
MainWP updraftplus extension MainWP の WordPress 用 updraftplus extension における認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2023-23640 2024-10-7 09:44 2023-01-17 Show GitHub Exploit DB Packet Storm
66 6.5 警告
Network
Online Voting System project Online Voting System Online Voting System project の Online Voting System におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反
CVE-2024-45987 2024-10-7 09:44 2024-09-26 Show GitHub Exploit DB Packet Storm
67 7.8 重要
Local
randygaul cute png randygaul の cute png における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2024-46258 2024-10-7 09:44 2024-10-1 Show GitHub Exploit DB Packet Storm
68 7.8 重要
Local
randygaul cute png randygaul の cute png における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2024-46264 2024-10-7 09:44 2024-10-1 Show GitHub Exploit DB Packet Storm
69 4.8 警告
Network
Ampache.org Ampache Ampache.org の Ampache におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-47184 2024-10-7 09:44 2024-09-27 Show GitHub Exploit DB Packet Storm
70 4.3 警告
Network
RadiusTheme the post grid RadiusTheme の WordPress 用 the post grid における脆弱性 New CWE-200
CWE-noinfo
CVE-2024-7418 2024-10-7 09:44 2024-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Compress WP Compress – Image Optimizer [All-In-One] allows Reflected XSS.This issue aff… New CWE-79
Cross-site Scripting
CVE-2024-47384 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
112 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webangon The Pack Elementor addons allows Stored XSS.This issue affects The Pack Elementor… New CWE-79
Cross-site Scripting
CVE-2024-47383 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
113 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webvitaly Page-list allows Stored XSS.This issue affects Page-list: from n/a through 5.6. New CWE-79
Cross-site Scripting
CVE-2024-47382 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
114 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a thro… New CWE-79
Cross-site Scripting
CVE-2024-47381 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
115 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay allows Reflected XSS.This issue affects WP-Lister Lite for … New CWE-79
Cross-site Scripting
CVE-2024-47380 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
116 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sale php scripts Web Directory Free allows Reflected XSS.This issue affects Web Directory … New CWE-79
Cross-site Scripting
CVE-2024-47379 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
117 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPCOM WPCOM Member allows Reflected XSS.This issue affects WPCOM Member: from n/a through … New CWE-79
Cross-site Scripting
CVE-2024-47378 2024-10-6 00:15 2024-10-6 Show GitHub Exploit DB Packet Storm
118 - - - A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been declared as critical. Affected by this vulnerability is the function formEasySetupWWConfig of the file /goform/formEasySetupWWCo… New CWE-120
Classic Buffer Overflow
CVE-2024-9535 2024-10-5 23:15 2024-10-5 Show GitHub Exploit DB Packet Storm
119 - - - A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation o… New CWE-120
Classic Buffer Overflow
CVE-2024-9534 2024-10-5 23:15 2024-10-5 Show GitHub Exploit DB Packet Storm
120 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ElementInvader ElementInvader Addons for Elementor allows Stored XSS.This issue affects El… New CWE-79
Cross-site Scripting
CVE-2024-47630 2024-10-5 23:15 2024-10-5 Show GitHub Exploit DB Packet Storm