Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 6, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2024-46861	2024-10-4 15:41	2024-08-9	Show	GitHub Exploit DB Packet Storm

2	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2024-44973	2024-10-4 15:39	2024-07-30	Show	GitHub Exploit DB Packet Storm

3	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2024-44968	2024-10-4 15:36	2024-07-31	Show	GitHub Exploit DB Packet Storm

4	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2024-44970	2024-10-4 15:21	2024-06-5	Show	GitHub Exploit DB Packet Storm

5	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2024-46864	2024-10-4 15:12	2024-09-5	Show	GitHub Exploit DB Packet Storm

6	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 New	CWE-401 有効期限後のメモリの解放の欠如	CVE-2024-44969	2024-10-4 15:12	2024-07-1	Show	GitHub Exploit DB Packet Storm

7	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 New	CWE-129 配列インデックスの不適切な検証	CVE-2024-46859	2024-10-4 15:09	2024-09-9	Show	GitHub Exploit DB Packet Storm

8	7.2	重要 Network	Palo Alto Networks	PAN-OS	Palo Alto Networks の PAN-OS における OS コマンドインジェクションの脆弱性 New	CWE-78 CWE-78	CVE-2024-8686	2024-10-4 15:07	2024-09-11	Show	GitHub Exploit DB Packet Storm

9	9.8	緊急 Network	tduckcloud	tduckpro	tduckcloud の tduckpro におけるパスワード管理機能に関する脆弱性 New	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2024-8692	2024-10-4 15:07	2024-09-11	Show	GitHub Exploit DB Packet Storm

10	7.5	重要 Network	Hughes Network Systems	wl300 fusion software	Hughes Network Systems の wl300 fusion software における脆弱性 New	CWE-311 CWE-noinfo	CVE-2024-42495	2024-10-4 15:05	2024-09-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 6, 2024, 4:10 p.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258731	-	zenturi	zenturi_programchecker	Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) Debu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-2987	2011-09-20 13:00	2007-06-1	Show	GitHub Exploit DB Packet Storm

258732	-	zenturi	zenturi_programchecker	Failed exploit attempts will likely result in denial-of-service condition.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-2987	2011-09-20 13:00	2007-06-1	Show	GitHub Exploit DB Packet Storm

258733	-	cogentdatahub	cogent_datahub	Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.	CWE-22 Path Traversal	CVE-2011-3500	2011-09-19 13:00	2011-09-17	Show	GitHub Exploit DB Packet Storm

258734	-	cogentdatahub	cogent_datahub	The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).	CWE-200 Information Exposure	CVE-2011-3502	2011-09-19 13:00	2011-09-17	Show	GitHub Exploit DB Packet Storm

258735	-	proftpd	proftpd	Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC esca…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-4221	2011-09-15 12:18	2010-11-10	Show	GitHub Exploit DB Packet Storm

258736	-	proftpd	proftpd	Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modi…	CWE-22 Path Traversal	CVE-2010-3867	2011-09-15 12:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

258737	-	banshee-project	banshee	The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse share…	NVD-CWE-Other	CVE-2010-3998	2011-09-15 12:17	2010-11-6	Show	GitHub Exploit DB Packet Storm

258738	-	nick_copeland	bristol	startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directo…	NVD-CWE-Other	CVE-2010-3351	2011-09-15 12:16	2010-10-21	Show	GitHub Exploit DB Packet Storm

258739	-	kernel linux	linux_kernel	The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of ser…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-3288	2011-09-15 12:06	2009-09-22	Show	GitHub Exploit DB Packet Storm

258740	-	mark_stosberg	data\	The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-2201	2011-09-15 01:05	2011-09-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed