Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 6, 2024, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
61 7.5 重要
Network 		シスコシステムズ Cisco IOS XR シスコシステムズの Cisco IOS XR における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
CWE-401
CVE-2024-20304 2024-10-4 13:50 2024-09-11 Show GitHub Exploit DB Packet Storm
62 5.4 警告
Network 		- シスコシステムズの Cisco Catalyst SD-WAN Manager におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-20475 2024-10-4 13:50 2024-09-25 Show GitHub Exploit DB Packet Storm
63 6.5 警告
Network 		シスコシステムズ Cisco Unified Threat Defense Snort Intrusion Prevention System Engine シスコシステムズの Cisco Unified Threat Defense Snort Intrusion Prevention System Engine における境界外書き込みに関する脆弱性 New CWE-122
CWE-787
CVE-2024-20508 2024-10-4 13:50 2024-09-25 Show GitHub Exploit DB Packet Storm
64 9.8 緊急
Network 		bbsetheme bbs-e-popup bbsetheme の WordPress 用 bbs-e-popup における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2023-36504 2024-10-4 13:50 2023-06-22 Show GitHub Exploit DB Packet Storm
65 8.8 重要
Adjacent 		Ivanti Ivanti Endpoint Manager Ivanti の Ivanti Endpoint Manager における SQL インジェクションの脆弱性 New CWE-89
CWE-89
CVE-2024-29826 2024-10-4 13:49 2024-05-31 Show GitHub Exploit DB Packet Storm
66 8.8 重要
Adjacent 		Ivanti Ivanti Endpoint Manager Ivanti の Ivanti Endpoint Manager における SQL インジェクションの脆弱性 New CWE-89
CWE-89
CVE-2024-29827 2024-10-4 13:49 2024-05-31 Show GitHub Exploit DB Packet Storm
67 9.8 緊急
Network 		Motorola Solutions, Inc vigilant fixed lpr coms box ファームウェア Motorola Solutions, Inc の vigilant fixed lpr coms box ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性 New CWE-798
ハードコードされた認証情報の使用 		CVE-2024-38281 2024-10-4 13:49 2024-06-13 Show GitHub Exploit DB Packet Storm
68 9.6 緊急
Network 		VNote project VNote VNote project の VNote におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-41662 2024-10-4 13:49 2024-07-24 Show GitHub Exploit DB Packet Storm
69 7.5 重要
Network 		lunary lunary lunary におけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
CWE-863
CVE-2024-5130 2024-10-4 13:49 2024-06-6 Show GitHub Exploit DB Packet Storm
70 7.5 重要
Network 		nationalkeep cybermath nationalkeep の cybermath における外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 New CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2024-7107 2024-10-4 13:49 2024-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 6, 2024, 4:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259341 - ibm websphere_application_server IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local u… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0740 2011-03-8 12:05 2008-02-13 Show GitHub Exploit DB Packet Storm
259342 - ibm websphere_application_server Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors. NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0741 2011-03-8 12:05 2008-02-13 Show GitHub Exploit DB Packet Storm
259343 - horde groupware
groupware_webmail_edition
turba_contact_manager 		lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition bef… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0807 2011-03-8 12:05 2008-02-19 Show GitHub Exploit DB Packet Storm
259344 - caroline caroline SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2008-0825 2011-03-8 12:05 2008-02-20 Show GitHub Exploit DB Packet Storm
259345 - caroline caroline Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2008-0826 2011-03-8 12:05 2008-02-20 Show GitHub Exploit DB Packet Storm
259346 - ibm lotus_quickr Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting 		CVE-2008-0834 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
259347 - sun solaris Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service (panic) via unspecified vectors that trigger a N… NVD-CWE-noinfo
CVE-2008-0836 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
259348 - kerio
visnetic 		kerio_mailserver
visnetic_antivirus_plug-in_for_mail_server 		Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors. CWE-94
Code Injection 		CVE-2008-0858 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
259349 - kerio kerio_mailserver Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers … NVD-CWE-noinfo
CWE-399
 Resource Management Errors 		CVE-2008-0859 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
259350 - kerio avg_plugin
kerio_mailserver 		Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs. NVD-CWE-noinfo
CVE-2008-0860 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm