Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
188581	3.5	注意	IBM	-	IBM DB2 における任意の XML ファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2012-0713	2012-08-27 14:35	2012-02-15	Show	GitHub Exploit DB Packet Storm

188582	6.9	警告	ソフォス	-	複数の Sophos 製品におけるフルディスク暗号化の機能を破られる脆弱性	CWE-362 競合状態	CVE-2011-5117	2012-08-27 14:35	2011-01-6	Show	GitHub Exploit DB Packet Storm

188583	7.5	危険	SetSeed	-	SetSeed CMS の setseed-hub における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5116	2012-08-27 14:34	2012-08-23	Show	GitHub Exploit DB Packet Storm

188584	4.3	警告	DLGuard	-	DLGuard におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5115	2012-08-27 14:34	2012-08-23	Show	GitHub Exploit DB Packet Storm

188585	4.3	警告	バラクーダネットワークス	-	Barracuda Link Balancer 330 ファームウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5114	2012-08-27 14:33	2012-08-23	Show	GitHub Exploit DB Packet Storm

188586	7.5	危険	Techdeluge	-	Joomla! 用 Techfolio コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5113	2012-08-27 14:32	2012-08-23	Show	GitHub Exploit DB Packet Storm

188587	7.5	危険	E. Wayne Madison	-	Joomla! 用 Alameda コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5112	2012-08-27 14:31	2011-11-9	Show	GitHub Exploit DB Packet Storm

188588	7.5	危険	kajianwebsite.org	-	Kajian Website CMS Balitbang における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5111	2012-08-27 14:31	2012-08-23	Show	GitHub Exploit DB Packet Storm

188589	7.5	危険	John Geo	-	Blogs Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5110	2012-08-27 14:30	2012-08-23	Show	GitHub Exploit DB Packet Storm

188590	7.5	危険	John Geo	-	Freelancer calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5109	2012-08-27 14:29	2012-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
411	8.6	HIGH Network	-	-	A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. … New	CWE-400 Uncontrolled Resource Consumption	CVE-2023-20125	2024-11-16 00:15	2024-11-16	Show	GitHub Exploit DB Packet Storm

412	7.0	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_8.1 windows_7 windows_rt_8.1 windows_10_1909 windows_10_21h1 windows_10_20h2 windows_11_21h2 windows_10_21h2 windows_10_1…	Windows User Profile Service Elevation of Privilege Vulnerability	CWE-59 Link Following	CVE-2022-21919	2024-11-15 23:35	2022-01-12	Show	GitHub Exploit DB Packet Storm

413	7.8	HIGH Local	microsoft	windows_10_1909 windows_10_21h1 windows_10_20h2 windows_11_21h2 windows_10_21h2 windows_server_2022 windows_server_20h2 windows_server_2019 windows_10_1809	Win32k Elevation of Privilege Vulnerability	CWE-787 Out-of-bounds Write	CVE-2022-21882	2024-11-15 23:35	2022-01-12	Show	GitHub Exploit DB Packet Storm

414	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019 windows_server_2022 windows_10_1607 windows_10_1809 …	Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCh…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2013-3900	2024-11-15 23:34	2013-12-11	Show	GitHub Exploit DB Packet Storm

415	-		-	-	A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /database.php of the component Banco de Dados Tab. …	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2024-11240	2024-11-15 23:23	2024-11-15	Show	GitHub Exploit DB Packet Storm

416	-		-	-	A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the comp…	CWE-22 Path Traversal	CVE-2024-11239	2024-11-15 23:23	2024-11-15	Show	GitHub Exploit DB Packet Storm

417	-		-	-	Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login.	-	CVE-2024-52553	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

418	-		-	-	Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability…	-	CVE-2024-52552	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

419	-		-	-	Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing att…	-	CVE-2024-52551	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

420	-		-	-	Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attacker…	-	CVE-2024-52550	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed