Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 20, 2024, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188151 9.3 危険 マイクロソフト - Microsoft Publisher におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-0001 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
188152 2.6 注意 ジャストシステム - ATOK for Android における学習情報ファイルのアクセス権限に関する問題 CWE-264
認可・権限・アクセス制御
CVE-2012-4016 2012-09-25 12:01 2012-09-25 Show GitHub Exploit DB Packet Storm
188153 6.8 警告 アップル - Apple iOS 6 未満で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
CWE-399
CVE-2012-3747 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188154 4.3 警告 アップル - Apple iOS 6 未満の UIKit における平文のファイルコンテンツを取得される脆弱性 CWE-310
暗号の問題
CVE-2012-3746 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188155 5 警告 アップル - Apple iOS 6 未満におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-3745 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188156 5 警告 アップル - Apple iOS 6 未満におけるテキストコミュニケーションを偽造される脆弱性 CWE-DesignError
CVE-2012-3744 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188157 5 警告 アップル - Apple iOS 6 未満のシステムログの実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3743 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188158 5 警告 アップル - Apple iOS 6 未満の Safari における https 接続に偽装される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3742 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188159 1.9 注意 アップル - Apple iOS 6 未満の制限の実装における Apple ID 認証ステップを回避される脆弱性 CWE-287
不適切な認証
CVE-2012-3741 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
188160 2.1 注意 アップル - Apple iOS 6 未満のパスコードロックの実装におけるパスコード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3740 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 20, 2024, 4:18 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 9.8 CRITICAL
Network
weechat weechat WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_f… Update CWE-190
 Integer Overflow or Wraparound
CVE-2024-46613 2024-11-20 06:35 2024-11-11 Show GitHub Exploit DB Packet Storm
112 - - - wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types. Update - CVE-2024-27532 2024-11-20 06:35 2024-11-9 Show GitHub Exploit DB Packet Storm
113 - - - A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances wher… Update - CVE-2024-39884 2024-11-20 06:35 2024-07-4 Show GitHub Exploit DB Packet Storm
114 7.5 HIGH
Network
pymumu smartdns smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c. Update NVD-CWE-noinfo
CVE-2024-24198 2024-11-20 06:35 2024-06-7 Show GitHub Exploit DB Packet Storm
115 4.9 MEDIUM
Network
- - Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged a… Update - CVE-2024-21058 2024-11-20 06:35 2024-04-17 Show GitHub Exploit DB Packet Storm
116 - - - An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header. Update - CVE-2024-25170 2024-11-20 06:35 2024-02-29 Show GitHub Exploit DB Packet Storm
117 6.1 MEDIUM
Network
thimpress learnpress_export_import The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'learnpress_import_form_server' parameter in all version… Update CWE-79
Cross-site Scripting
CVE-2024-9609 2024-11-20 06:28 2024-11-15 Show GitHub Exploit DB Packet Storm
118 5.4 MEDIUM
Network
wpeka wp_adcenter The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpadcenter_ad shortcode in all versions up to, and including, 2.5.7 due t… Update CWE-79
Cross-site Scripting
CVE-2024-10113 2024-11-20 06:26 2024-11-15 Show GitHub Exploit DB Packet Storm
119 9.8 CRITICAL
Network
1000projects beauty_parlour_management_system A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the a… Update CWE-89
SQL Injection
CVE-2024-11258 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
120 9.8 CRITICAL
Network
1000projects beauty_parlour_management_system A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of t… Update CWE-89
SQL Injection
CVE-2024-11257 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm