You can search the list of vulnerabilities managed by JVN (Japan Vulnerability Note). |
|
Update Date:Dec. 28, 2024, 6 p.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
901 | 8.2 |
重要
Network |
GitLab.org | GitLab | GitLab.org の GitLab におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-4835 | 2024-12-17 17:51 | 2024-05-23 | Show | GitHub Exploit DB Packet Storm |
902 | 5.4 |
警告
Network |
WebAsyst | webasyst | WebAsyst の webasyst におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-27517 | 2024-12-17 17:51 | 2024-02-29 | Show | GitHub Exploit DB Packet Storm |
903 | 4.3 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity における脆弱性 |
CWE-201 CWE-Other Insertion of Sensitive Information Into Sent Data Other |
CVE-2024-28173 | 2024-12-17 17:51 | 2024-03-6 | Show | GitHub Exploit DB Packet Storm |
904 | 6.5 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity におけるパストラバーサルの脆弱性 |
CWE-22 CWE-23 Path Traversal Relative Path Traversal |
CVE-2024-36362 | 2024-12-17 17:51 | 2024-05-29 | Show | GitHub Exploit DB Packet Storm |
905 | 3.1 |
低
Network |
オラクル 日立 |
uCosminexus Primary Server Base(64) Hitachi Ops Center Common Services uCosminexus Primary Server Base uCosminexus Service Archite… |
Oracle Java SE および Oracle GraalVM Enterprise Edition における Networking に関する脆弱性 |
CWE-noinfo
noinfo |
CVE-2021-2341 | 2024-12-17 17:45 | 2021-07-20 | Show | GitHub Exploit DB Packet Storm |
906 | 7.8 |
重要
Local |
Android | Google の Android における認証の欠如に関する脆弱性 |
CWE-862 CWE-862 Missing Authorization Missing Authorization |
CVE-2024-0038 | 2024-12-17 17:45 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
907 | 7.8 |
重要
Local |
Android | Google の Android における脆弱性 |
CWE-230 CWE-noinfo Improper Handling of Missing Values noinfo |
CVE-2024-0048 | 2024-12-17 17:45 | 2024-03-11 | Show | GitHub Exploit DB Packet Storm | |
908 | 7.8 |
重要
Local |
Android | Google の Android における境界外書き込みに関する脆弱性 |
CWE-787 CWE-787 Out-of-bounds Write Out-of-bounds Write |
CVE-2024-0051 | 2024-12-17 17:45 | 2024-03-11 | Show | GitHub Exploit DB Packet Storm | |
909 | 5.5 |
警告
Local |
openatom | openharmony | openatom の openharmony におけるパーミッションの不適切な保持に関する脆弱性 |
CWE-281 CWE-281 Improper Preservation of Permissions Improper Preservation of Permissions |
CVE-2024-21816 | 2024-12-17 17:45 | 2024-03-4 | Show | GitHub Exploit DB Packet Storm |
910 | 5.5 |
警告
Local |
openatom | openharmony | openatom の openharmony における重要な情報のセキュアでない格納に関する脆弱性 |
CWE-922 CWE-922 Insecure Storage of Sensitive Information Insecure Storage of Sensitive Information |
CVE-2024-21826 | 2024-12-17 17:45 | 2024-03-4 | Show | GitHub Exploit DB Packet Storm |
911 | 7.8 |
重要
Local |
Android | Google の Android における解放済みメモリの使用に関する脆弱性 |
CWE-416 CWE-416 Use After Free Use After Free |
CVE-2023-40100 | 2024-12-17 17:40 | 2023-08-9 | Show | GitHub Exploit DB Packet Storm | |
912 | 6.1 |
警告
Network |
oretnom23 | simple student attendance system | oretnom23 の simple student attendance system におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2023-51802 | 2024-12-17 17:40 | 2023-12-26 | Show | GitHub Exploit DB Packet Storm |
913 | 7.8 |
重要
Local |
Android | Google の Android における境界外書き込みに関する脆弱性 |
CWE-122 CWE-787 Heap-based Buffer Overflow Out-of-bounds Write |
CVE-2024-0018 | 2024-12-17 17:40 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
914 | 7.8 |
重要
Local |
Android | Google の Android における脆弱性 |
CWE-20 CWE-noinfo Improper Input Validation noinfo |
CVE-2024-0021 | 2024-12-17 17:40 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
915 | 9.8 |
緊急
Network Google |
Android
|
Google の Android における境界外書き込みに関する脆弱性
|
CWE-20 |
CWE-787 Improper Input Validation Out-of-bounds Write
CVE-2024-0031
|
2024-12-17 17:39 |
2024-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
916 | 9.4 |
緊急
Network 日立 |
Hitachi Infrastructure Analytics Advisor |
Hitachi Ops Center Analyzer
Hitachi Infrastructure Analytics Advisor および Hitachi Ops Center Analyzer における認証バイパスの脆弱性
|
CWE-306
|
Missing Authentication for Critical Function
CVE-2024-10205
|
2024-12-17 14:52 |
2024-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
917 | 5.5 |
警告
Local |
openatom | openharmony | openatom の openharmony における境界外読み取りに関する脆弱性 |
CWE-125 CWE-125 Out-of-bounds Read Out-of-bounds Read |
CVE-2023-25176 | 2024-12-17 13:58 | 2023-11-28 | Show | GitHub Exploit DB Packet Storm |
918 | 8.8 |
重要
Network |
GStreamer | GStreamer | GStreamer におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-121
Stack-based Buffer Overflow |
CVE-2023-40476 | 2024-12-17 13:57 | 2023-08-14 | Show | GitHub Exploit DB Packet Storm |
919 | 7.8 |
重要
Local |
openatom | openharmony | openatom の openharmony における解放済みメモリの使用に関する脆弱性 |
CWE-416 CWE-416 Use After Free Use After Free |
CVE-2023-46708 | 2024-12-17 13:57 | 2023-11-28 | Show | GitHub Exploit DB Packet Storm |
920 | 5.7 |
警告
Network |
decidim | decidim | Ruby 用 decidim におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352 CWE-918 Origin Validation Error Server-Side Request Forgery (SSRF) |
CVE-2023-47635 | 2024-12-17 13:57 | 2023-11-7 | Show | GitHub Exploit DB Packet Storm |
921 | 4.8 |
警告
Network |
Concrete CMS | Concrete CMS | Concrete CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-48650 | 2024-12-17 13:57 | 2023-11-17 | Show | GitHub Exploit DB Packet Storm |
922 | 9.8 |
緊急
Network oretnom23 |
simple student attendance system
|
oretnom23 の simple student attendance system におけるコードインジェクションの脆弱性
|
CWE-94 |
CWE-94 Code Injection Code Injection
CVE-2023-51801
|
2024-12-17 13:57 |
2023-12-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
923 | 6.5 |
警告
Local |
Android | Google の Android における脆弱性 |
CWE-284 CWE-noinfo Improper Access Control noinfo |
CVE-2024-0032 | 2024-12-17 13:57 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
924 | 6.5 |
警告
Network |
Progress Software Corporation | Sitefinity | Progress Software Corporation の Sitefinity における脆弱性 |
CWE-284 CWE-noinfo Improper Access Control noinfo |
CVE-2024-1632 | 2024-12-17 13:57 | 2024-02-28 | Show | GitHub Exploit DB Packet Storm |
925 | 7.3 |
重要
Network JetBrains |
TeamCity
|
JetBrains の TeamCity におけるパストラバーサルの脆弱性
|
CWE-22 |
CWE-23 Path Traversal Relative Path Traversal
CVE-2024-27199
|
2024-12-17 13:57 |
2024-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
926 | 5.3 |
警告
Network JetBrains |
YouTrack
|
JetBrains の YouTrack におけるスプーフィングによる認証回避に関する脆弱性
|
CWE-290 |
CWE-290 Authentication Bypass by Spoofing Authentication Bypass by Spoofing
CVE-2024-28228
|
2024-12-17 13:57 |
2024-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
927 | 6.5 |
警告
Network |
JetBrains | YouTrack | JetBrains の YouTrack における認証の欠如に関する脆弱性 |
CWE-862 CWE-862 Missing Authorization Missing Authorization |
CVE-2024-28230 | 2024-12-17 13:57 | 2024-03-7 | Show | GitHub Exploit DB Packet Storm |
928 | 6.1 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-36367 | 2024-12-17 13:57 | 2024-05-29 | Show | GitHub Exploit DB Packet Storm |
929 | 4.8 |
警告
Network |
Concrete CMS | Concrete CMS | Concrete CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-20 CWE-79 Improper Input Validation Cross-site Scripting |
CVE-2024-4353 | 2024-12-17 13:57 | 2024-08-1 | Show | GitHub Exploit DB Packet Storm |
930 | 4.8 |
警告
Network |
Concrete CMS | Concrete CMS | Concrete CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-8661 | 2024-12-17 13:57 | 2024-09-16 | Show | GitHub Exploit DB Packet Storm |
931 | 6.5 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity における不正な認証に関する脆弱性 |
CWE-863 CWE-863 Incorrect Authorization Incorrect Authorization |
CVE-2024-31134 | 2024-12-17 11:29 | 2024-03-28 | Show | GitHub Exploit DB Packet Storm |
932 | 4.8 |
警告
Network |
Concrete CMS | Concrete CMS | Concrete CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-3178 | 2024-12-17 11:29 | 2024-04-3 | Show | GitHub Exploit DB Packet Storm |
933 | 4.8 |
警告
Network |
Concrete CMS | Concrete CMS | Concrete CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-3181 | 2024-12-17 11:29 | 2024-04-3 | Show | GitHub Exploit DB Packet Storm |
934 | 5.5 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity における脆弱性 |
CWE-280 CWE-Other Improper Handling of Insufficient Permissions or Privileges Other |
CVE-2024-35301 | 2024-12-17 11:29 | 2024-05-16 | Show | GitHub Exploit DB Packet Storm |
935 | 5.4 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-36363 | 2024-12-17 11:29 | 2024-05-29 | Show | GitHub Exploit DB Packet Storm |
936 | 6.5 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity における不正な認証に関する脆弱性 |
CWE-863 CWE-863 Incorrect Authorization Incorrect Authorization |
CVE-2024-36364 | 2024-12-17 11:29 | 2024-05-29 | Show | GitHub Exploit DB Packet Storm |
937 | 5.4 |
警告
Network |
Progress Software Corporation | Sitefinity | Progress Software Corporation の Sitefinity におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2024-1636 | 2024-12-17 11:28 | 2024-02-28 | Show | GitHub Exploit DB Packet Storm |
938 | 5.5 |
警告
Local |
Android | Google の Android における不正な認証に関する脆弱性 |
CWE-863 CWE-863 Incorrect Authorization Incorrect Authorization |
CVE-2024-0017 | 2024-12-17 11:28 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
939 | 5.5 |
警告
Local |
Android | Google の Android における脆弱性 |
CWE-noinfo
noinfo |
CVE-2024-0020 | 2024-12-17 11:28 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
940 | 7.8 |
重要
Local |
Android | Google の Android における脆弱性 |
CWE-284 CWE-noinfo Improper Access Control noinfo |
CVE-2024-0036 | 2024-12-17 11:27 | 2024-02-16 | Show | GitHub Exploit DB Packet Storm | |
941 | 7.5 |
重要
Network Google |
Android
|
Google の Android における境界外書き込みに関する脆弱性
|
CWE-122 |
CWE-787 Heap-based Buffer Overflow Out-of-bounds Write
CVE-2024-0040
|
2024-12-17 11:27 |
2024-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
942 | 7.8 |
重要
Local |
Android | Google の Android における境界外書き込みに関する脆弱性 |
CWE-787 CWE-787 Out-of-bounds Write Out-of-bounds Write |
CVE-2024-0050 | 2024-12-17 11:27 | 2024-03-11 | Show | GitHub Exploit DB Packet Storm | |
943 | 8.8 |
重要
Network |
GStreamer | GStreamer | GStreamer における解放済みメモリの使用に関する脆弱性 |
CWE-416 CWE-416 Use After Free Use After Free |
CVE-2023-44446 | 2024-12-17 11:26 | 2023-09-28 | Show | GitHub Exploit DB Packet Storm |
944 | 5.4 |
警告
Network |
school fees management system project | school fees management system1.0 | school fees management system project の school fees management system1.0 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79 CWE-79 Cross-site Scripting Cross-site Scripting |
CVE-2023-51800 | 2024-12-17 11:26 | 2023-12-26 | Show | GitHub Exploit DB Packet Storm |
945 | 3.3 |
低
Local |
株式会社集英社 | 少年ジャンプ+ 人気漫画が読める雑誌アプリ | Androidアプリ「少年ジャンプ+ 人気漫画が読める雑誌アプリ」におけるアクセス制限不備の脆弱性 |
CWE-Other
Other |
CVE-2024-54125 | 2024-12-17 11:12 | 2024-12-16 | Show | GitHub Exploit DB Packet Storm |
946 | 8.1 |
重要
Network |
JetBrains | TeamCity | JetBrains の TeamCity における不正な認証に関する脆弱性 |
CWE-863 CWE-863 Incorrect Authorization Incorrect Authorization |
CVE-2024-36365 | 2024-12-17 10:08 | 2024-05-29 | Show | GitHub Exploit DB Packet Storm |
947 | 6.1 |
警告
Network |
GitLab.org | GitLab | GitLab.org の GitLab におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352 CWE-352 Origin Validation Error Origin Validation Error |
CVE-2023-7045 | 2024-12-17 10:04 | 2023-12-21 | Show | GitHub Exploit DB Packet Storm |
948 | 8.8 |
重要
Network |
GStreamer | GStreamer | GStreamer における境界外書き込みに関する脆弱性 |
CWE-122 CWE-787 Heap-based Buffer Overflow Out-of-bounds Write |
CVE-2023-44429 | 2024-12-17 10:04 | 2023-09-28 | Show | GitHub Exploit DB Packet Storm |
949 | 4.8 |
警告
Network |
Concrete CMS | Concrete CMS | Concrete CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-49337 | 2024-12-17 10:04 | 2023-11-27 | Show | GitHub Exploit DB Packet Storm |
950 | 5.3 |
警告
Network Google |
Android
|
Google の Android における境界外読み取りに関する脆弱性
|
CWE-125 |
CWE-125 Out-of-bounds Read Out-of-bounds Read
CVE-2024-0016
|
2024-12-17 10:04 |
2024-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|