Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Nov. 15, 2024, 6:02 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 188731 | 7.5 | 危険 | Myrephp Programming | - | MYRE Real Estate Software における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-4258 | 2012-08-15 20:06 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188732 | 5 | 警告 | George Karpouzas | - | Yaqas における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-4257 | 2012-08-15 20:03 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188733 | 5 | 警告 | Joobi | - | Joomla! 用 jNews コンポーネントにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-4256 | 2012-08-15 20:01 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188734 | 4.3 | 警告 | MySQLDumper-Team | - | MySQLDumper における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-4255 | 2012-08-15 19:58 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188735 | 4.3 | 警告 | MySQLDumper-Team | - | MySQLDumper における重要な情報 (通知情報) を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-4254 | 2012-08-15 19:57 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188736 | 4.3 | 警告 | MySQLDumper-Team | - | MySQLDumper におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-4253 | 2012-08-15 19:55 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188737 | 9.3 | 危険 | サムスン | - | Samsung NET-i viewer の msls31.dll におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-4250 | 2012-08-15 19:49 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188738 | 4.3 | 警告 | NetWebLogic | - | WordPress 用 Login With Ajax プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-4283 | 2012-08-15 15:58 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188739 | 7.5 | 危険 | Toocharger | - | Trombinoscope の photo.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-4282 | 2012-08-15 15:55 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
| 188740 | 7.5 | 危険 | s9y | - | Serendipity の serendipity/serendipity_admin.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-2332 | 2012-08-15 15:53 | 2012-08-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Nov. 15, 2024, 4:16 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 141 | 5.5 |
MEDIUM
Local |
microsoft |
windows_server_2019 windows_10 |
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability Update |
NVD-CWE-noinfo
|
CVE-2022-21839 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 142 | 7.8 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_server_2019 windows_11 windows_server |
Windows Cleanup Manager Elevation of Privilege Vulnerability Update |
CWE-59
Link Following |
CVE-2022-21838 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 143 | 8.8 |
HIGH
Network |
microsoft |
sharepoint_foundation sharepoint_server |
Microsoft SharePoint Server Remote Code Execution Vulnerability Update |
NVD-CWE-noinfo
|
CVE-2022-21837 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 144 | 7.8 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_server_2019 windows_11 windows_server |
Windows Certificate Spoofing Vulnerability Update |
CWE-295
Improper Certificate Validation |
CVE-2022-21836 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 145 | 7.8 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_server_2019 windows_11 windows_server |
Microsoft Cryptographic Services Elevation of Privilege Vulnerability Update |
NVD-CWE-noinfo
|
CVE-2022-21835 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 146 | 7.8 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_server_2019 windows_11 windows_server |
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability Update |
NVD-CWE-noinfo
|
CVE-2022-21834 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 147 | 7.8 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_server_2019 windows_11 windows_server |
Virtual Machine IDE Drive Elevation of Privilege Vulnerability Update |
NVD-CWE-noinfo
|
CVE-2022-21833 | 2024-11-15 06:15 | 2022-01-12 | Show | GitHub Exploit DB Packet Storm |
| 148 | 7.4 |
HIGH
Network |
microsoft |
windows_xp windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2003 windows_server_2019 windows_vi… |
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCh… Update |
CWE-20
Improper Input Validation |
CVE-2013-3900 | 2024-11-15 06:15 | 2013-12-11 | Show | GitHub Exploit DB Packet Storm |
| 149 | 5.9 |
MEDIUM
Network |
ibm | txseries_for_multiplatforms | IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the … Update |
NVD-CWE-noinfo
|
CVE-2024-41738 | 2024-11-15 05:51 | 2024-11-2 | Show | GitHub Exploit DB Packet Storm |
| 150 | 7.8 |
HIGH
Local |
bytecodealliance | webassembly_micro_runtime | An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility func… Update |
CWE-125
Out-of-bounds Read |
CVE-2024-25431 | 2024-11-15 05:42 | 2024-11-9 | Show | GitHub Exploit DB Packet Storm |