Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 8, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188741 7.5 危険 MantisBT Group - MantisBT の SOAP API の api/soap/mc_api.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2012-1123 2012-07-3 18:53 2012-03-3 Show GitHub Exploit DB Packet Storm
188742 3.6 注意 MantisBT Group - MantisBT の bug_actiongroup.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1122 2012-07-3 18:50 2012-03-3 Show GitHub Exploit DB Packet Storm
188743 4.9 警告 MantisBT Group - MantisBT におけるグローバルカテゴリを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1121 2012-07-3 17:41 2012-03-3 Show GitHub Exploit DB Packet Storm
188744 3.6 注意 MantisBT Group - MantisBT の SOAP API における任意のバグレポートおよびバグノートを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1120 2012-07-3 17:41 2012-03-3 Show GitHub Exploit DB Packet Storm
188745 6.4 警告 MantisBT Group - MantisBT におけるバグレポートをコピーされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1119 2012-07-3 17:38 2012-03-3 Show GitHub Exploit DB Packet Storm
188746 4.3 警告 MantisBT Group - MantisBT の core/access_api.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1118 2012-07-3 17:34 2012-03-3 Show GitHub Exploit DB Packet Storm
188747 2.6 注意 OpenLDAP Foundation - OpenLDAP の slapd におけるサービス運用妨害 (表明違反および Daemon Exit) の脆弱性 CWE-119
バッファエラー 		CVE-2012-1164 2012-07-3 16:54 2012-02-29 Show GitHub Exploit DB Packet Storm
188748 4.3 警告 MediaWiki - MediaWiki の includes/SkinTemplate.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2698 2012-07-3 16:54 2012-06-12 Show GitHub Exploit DB Packet Storm
188749 2.1 注意 Richard W.M. Jones - libguestfs の virt-edit における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2690 2012-07-3 16:53 2012-05-22 Show GitHub Exploit DB Packet Storm
188750 4.3 警告 レッドハット - Red Hat sos パッケージの sosreport ユーティリティにおけるパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2664 2012-07-3 16:51 2012-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 8, 2024, 4:18 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 4.3 MEDIUM
Network 		shaon post_from_frontend The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack New CWE-352
 Origin Validation Error 		CVE-2024-9689 2024-11-8 05:35 2024-11-5 Show GitHub Exploit DB Packet Storm
62 - - - util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. Update - CVE-2024-47855 2024-11-8 05:35 2024-10-4 Show GitHub Exploit DB Packet Storm
63 - - - In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck() If due to a memory allocation failure mock_chain() returns NULL, it is pas… Update - CVE-2024-35916 2024-11-8 05:35 2024-05-19 Show GitHub Exploit DB Packet Storm
64 - - - Time4J Base v5.9.3 was discovered to contain a NullPointerException via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale). NOTE: this is disputed by multiple third par… Update - CVE-2024-23083 2024-11-8 05:35 2024-04-10 Show GitHub Exploit DB Packet Storm
65 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;" pi… Update - CVE-2024-26661 2024-11-8 05:35 2024-04-2 Show GitHub Exploit DB Packet Storm
66 - - - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between ordered extent completion and fiemap For fiemap we recently stopped locking the target extent range for t… Update - CVE-2024-26794 2024-11-8 05:35 2024-04-4 Show GitHub Exploit DB Packet Storm
67 - - - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC] With default config, the value of NR_CPUS is 64. When HW … Update - CVE-2024-26768 2024-11-8 05:35 2024-04-4 Show GitHub Exploit DB Packet Storm
68 5.5 MEDIUM
Local 		huawei harmonyos Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption. New NVD-CWE-noinfo
CVE-2024-51513 2024-11-8 05:30 2024-11-5 Show GitHub Exploit DB Packet Storm
69 5.4 MEDIUM
Network 		kibokolabs namaste\!_lms Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a throu… Update CWE-79
Cross-site Scripting 		CVE-2024-50410 2024-11-8 05:29 2024-10-29 Show GitHub Exploit DB Packet Storm
70 5.4 MEDIUM
Network 		kibokolabs namaste\!_lms Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a throu… Update CWE-79
Cross-site Scripting 		CVE-2024-50409 2024-11-8 05:28 2024-10-29 Show GitHub Exploit DB Packet Storm