Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188431 7.9 危険 シマンテック - Symantec Messaging Gateway におけるアクセス権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3579 2012-08-30 16:14 2012-08-27 Show GitHub Exploit DB Packet Storm
188432 6.8 警告 シマンテック - Symantec Messaging Gateway におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-0308 2012-08-30 16:14 2012-08-27 Show GitHub Exploit DB Packet Storm
188433 4.3 警告 ウェブセンス - Websense Content Gateway にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2984 2012-08-29 20:22 2012-08-24 Show GitHub Exploit DB Packet Storm
188434 6.8 警告 PBBoard - PBBoard の admin.php における任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2012-4036 2012-08-29 19:23 2012-08-6 Show GitHub Exploit DB Packet Storm
188435 2.1 注意 Debian - cifs-utils の mount.cifs における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2012-1586 2012-08-29 17:57 2012-03-27 Show GitHub Exploit DB Packet Storm
188436 5 警告 FFmpeg - FFmpeg の libavcodec におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0855 2012-08-29 17:41 2012-08-27 Show GitHub Exploit DB Packet Storm
188437 4.3 警告 FFmpeg - FFmpeg の libavcodec/j2k_dwt.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0849 2012-08-29 17:39 2011-12-16 Show GitHub Exploit DB Packet Storm
188438 4.3 警告 Andreas Gohr - DokuWiki の doku.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2129 2012-08-29 15:57 2012-04-19 Show GitHub Exploit DB Packet Storm
188439 4.3 警告 TYPO3 Association - TYPO3 の例外ハンドラにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2112 2012-08-29 15:56 2012-04-17 Show GitHub Exploit DB Packet Storm
188440 4.3 警告 Sourcefabric - Newscoop の admin/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4679 2012-08-29 15:55 2012-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 - - - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control … New CWE-79
Cross-site Scripting 		CVE-2024-45611 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
122 - - - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link… New - CVE-2024-45610 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
123 - - - An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files. New - CVE-2024-44758 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
124 4.9 MEDIUM
Network 		- - A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options. New - CVE-2024-11217 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
125 - - - Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This issue affects: ?Product Affected Versions LoadMaster Fro… Update CWE-20
 Improper Input Validation  		CVE-2024-8755 2024-11-16 06:15 2024-10-12 Show GitHub Exploit DB Packet Storm
126 5.5 MEDIUM
Local 		cysoft168 super_easy_enterprise_management_system An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server absolute path by entering a single quotation mark. Update CWE-22
Path Traversal 		CVE-2024-42680 2024-11-16 06:15 2024-08-15 Show GitHub Exploit DB Packet Storm
127 - - -  VMware Avi Load Balancer contains an information disclosure vulnerability. A malicious actor with access to the system logs can view cloud connection credentials in plaintext. Update - CVE-2024-22266 2024-11-16 05:35 2024-05-8 Show GitHub Exploit DB Packet Storm
128 - - - netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php. Update - CVE-2024-30872 2024-11-16 05:35 2024-04-1 Show GitHub Exploit DB Packet Storm
129 - - - An issue in uverif v.2.0 allows a remote attacker to obtain sensitive information. Update - CVE-2024-26559 2024-11-16 05:35 2024-02-29 Show GitHub Exploit DB Packet Storm
130 5.5 MEDIUM
Local 		- - Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by… New CWE-125
Out-of-bounds Read 		CVE-2024-49536 2024-11-16 05:15 2024-11-16 Show GitHub Exploit DB Packet Storm