Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
188651	4.3	警告	ヒューレット・パッカード	-	HP Service Manager Web Tier および HP Service Center Web Tier におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3251	2012-08-20 16:10	2012-08-13	Show	GitHub Exploit DB Packet Storm

188652	5	警告	ヒューレット・パッカード	-	HP Service Manager Server および HP Service Center Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3250	2012-08-20 16:09	2012-08-13	Show	GitHub Exploit DB Packet Storm

188653	4	警告	ヒューレット・パッカード	-	HP Fortify Software Security Center における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3249	2012-08-20 16:08	2012-08-13	Show	GitHub Exploit DB Packet Storm

188654	5	警告	ヒューレット・パッカード	-	HP Fortify Software Security Center における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3248	2012-08-20 16:07	2012-08-13	Show	GitHub Exploit DB Packet Storm

188655	4.9	警告	ヒューレット・パッカード	-	HP Integrity Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3247	2012-08-20 16:06	2012-08-13	Show	GitHub Exploit DB Packet Storm

188656	5	警告	Tridium	-	Tridium Niagara AX Framework のデフォルト設定における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-3025	2012-08-20 16:03	2012-08-15	Show	GitHub Exploit DB Packet Storm

188657	5	警告	Tridium	-	Tridium Niagara AX Framework における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-3024	2012-08-20 16:00	2012-08-15	Show	GitHub Exploit DB Packet Storm

188658	8.5	危険	シーメンス	-	Siemens COMOS におけるデータベースの管理者権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3009	2012-08-20 15:59	2012-08-10	Show	GitHub Exploit DB Packet Storm

188659	5.5	警告	Iomega DELL EMC (旧 EMC Corporation)	-	複数の Iomega 製品の EMC Lifeline ファームウェアにおけるデータを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2012-2283	2012-08-20 15:57	2012-08-16	Show	GitHub Exploit DB Packet Storm

188660	4.3	警告	Tom Braider	-	WordPress 用 Count Per Day モジュールの userperspan.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3434	2012-08-20 15:53	2012-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 18, 2024, 5:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
391	9.1	CRITICAL Network	-	-	A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vul… New	CWE-305 Authentication Bypass by Primary Weakness	CVE-2023-20154	2024-11-16 00:15	2024-11-16	Show	GitHub Exploit DB Packet Storm

392	8.6	HIGH Network	-	-	A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. … New	CWE-400 Uncontrolled Resource Consumption	CVE-2023-20125	2024-11-16 00:15	2024-11-16	Show	GitHub Exploit DB Packet Storm

393	7.0	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_8.1 windows_7 windows_rt_8.1 windows_10_1909 windows_10_21h1 windows_10_20h2 windows_11_21h2 windows_10_21h2 windows_10_1…	Windows User Profile Service Elevation of Privilege Vulnerability Update	CWE-59 Link Following	CVE-2022-21919	2024-11-15 23:35	2022-01-12	Show	GitHub Exploit DB Packet Storm

394	7.8	HIGH Local	microsoft	windows_10_1909 windows_10_21h1 windows_10_20h2 windows_11_21h2 windows_10_21h2 windows_server_2022 windows_server_20h2 windows_server_2019 windows_10_1809	Win32k Elevation of Privilege Vulnerability Update	CWE-787 Out-of-bounds Write	CVE-2022-21882	2024-11-15 23:35	2022-01-12	Show	GitHub Exploit DB Packet Storm

395	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019 windows_server_2022 windows_10_1607 windows_10_1809 …	Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCh… Update	CWE-347 Improper Verification of Cryptographic Signature	CVE-2013-3900	2024-11-15 23:34	2013-12-11	Show	GitHub Exploit DB Packet Storm

396	-		-	-	A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /database.php of the component Banco de Dados Tab. … New	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2024-11240	2024-11-15 23:23	2024-11-15	Show	GitHub Exploit DB Packet Storm

397	-		-	-	A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the comp… New	CWE-22 Path Traversal	CVE-2024-11239	2024-11-15 23:23	2024-11-15	Show	GitHub Exploit DB Packet Storm

398	-		-	-	Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login. Update	-	CVE-2024-52553	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

399	-		-	-	Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability… Update	-	CVE-2024-52552	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

400	-		-	-	Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing att… Update	-	CVE-2024-52551	2024-11-15 23:00	2024-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed