Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 8, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188741 7.5 危険 MantisBT Group - MantisBT の SOAP API の api/soap/mc_api.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-1123 2012-07-3 18:53 2012-03-3 Show GitHub Exploit DB Packet Storm
188742 3.6 注意 MantisBT Group - MantisBT の bug_actiongroup.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1122 2012-07-3 18:50 2012-03-3 Show GitHub Exploit DB Packet Storm
188743 4.9 警告 MantisBT Group - MantisBT におけるグローバルカテゴリを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1121 2012-07-3 17:41 2012-03-3 Show GitHub Exploit DB Packet Storm
188744 3.6 注意 MantisBT Group - MantisBT の SOAP API における任意のバグレポートおよびバグノートを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1120 2012-07-3 17:41 2012-03-3 Show GitHub Exploit DB Packet Storm
188745 6.4 警告 MantisBT Group - MantisBT におけるバグレポートをコピーされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1119 2012-07-3 17:38 2012-03-3 Show GitHub Exploit DB Packet Storm
188746 4.3 警告 MantisBT Group - MantisBT の core/access_api.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1118 2012-07-3 17:34 2012-03-3 Show GitHub Exploit DB Packet Storm
188747 2.6 注意 OpenLDAP Foundation - OpenLDAP の slapd におけるサービス運用妨害 (表明違反および Daemon Exit) の脆弱性 CWE-119
バッファエラー
CVE-2012-1164 2012-07-3 16:54 2012-02-29 Show GitHub Exploit DB Packet Storm
188748 4.3 警告 MediaWiki - MediaWiki の includes/SkinTemplate.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2698 2012-07-3 16:54 2012-06-12 Show GitHub Exploit DB Packet Storm
188749 2.1 注意 Richard W.M. Jones - libguestfs の virt-edit における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-2690 2012-07-3 16:53 2012-05-22 Show GitHub Exploit DB Packet Storm
188750 4.3 警告 レッドハット - Red Hat sos パッケージの sosreport ユーティリティにおけるパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-2664 2012-07-3 16:51 2012-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 8, 2024, 4:18 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 6.1 MEDIUM
Network
kibokolabs namaste\!_lms Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Reflected XSS.This issue affects Namaste! LMS: from n/a th… Update CWE-79
Cross-site Scripting
CVE-2024-50407 2024-11-8 05:28 2024-10-29 Show GitHub Exploit DB Packet Storm
72 8.2 HIGH
Local
intel thunderbolt_dch_driver Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to potentially enable escalation of privilege via local access. Update NVD-CWE-noinfo
CVE-2023-22293 2024-11-8 05:27 2024-02-14 Show GitHub Exploit DB Packet Storm
73 - - - A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login_process.php of… New - CVE-2024-10969 2024-11-8 05:15 2024-11-8 Show GitHub Exploit DB Packet Storm
74 - - - A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contact_process.p… New CWE-89
CWE-74
SQL Injection
Injection
CVE-2024-10968 2024-11-8 05:15 2024-11-8 Show GitHub Exploit DB Packet Storm
75 6.5 MEDIUM
Network
qualcomm wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8832_firmware
wsa8830_firmware
wcn7881_firmware
wcn7880_firmware
wcn7861_firmware
wcn7860_firmware
Transient DOS while parsing fragments of MBSSID IE from beacon frame. Update CWE-416
 Use After Free
CVE-2024-33068 2024-11-8 05:07 2024-11-4 Show GitHub Exploit DB Packet Storm
76 6.5 MEDIUM
Network
qualcomm wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8832_firmware
wsa8830_firmware
wcn7881_firmware
wcn7880_firmware
wcn7861_firmware
wcn7860_firmware
Transient DOS while processing the CU information from RNR IE. Update CWE-125
Out-of-bounds Read
CVE-2024-38405 2024-11-8 05:06 2024-11-4 Show GitHub Exploit DB Packet Storm
77 6.5 MEDIUM
Network
qualcomm wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8832_firmware
wsa8830_firmware
wcn7881_firmware
wcn7880_firmware
wcn7861_firmware
wcn7860_firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included. Update CWE-125
Out-of-bounds Read
CVE-2024-38403 2024-11-8 05:06 2024-11-4 Show GitHub Exploit DB Packet Storm
78 6.5 MEDIUM
Network
qualcomm wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8832_firmware
wsa8830_firmware
wsa8815_firmware
wsa8810_firmware
wcn6755_firmware
wcn3988_firmware
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. Update CWE-617
 Reachable Assertion
CVE-2024-23385 2024-11-8 05:05 2024-11-4 Show GitHub Exploit DB Packet Storm
79 6.7 MEDIUM
Local
qualcomm wsa8835_firmware
wsa8830_firmware
wcd9380_firmware
wcd9340_firmware
snapdragon_x75_5g_modem-rf_system_firmware
snapdragon_x72_5g_modem-rf_system_firmware
snapdragon_auto_5g_modem-rf…
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size. Update CWE-120
Classic Buffer Overflow
CVE-2024-33030 2024-11-8 05:04 2024-11-4 Show GitHub Exploit DB Packet Storm
80 7.5 HIGH
Network
huawei harmonyos Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality. New NVD-CWE-noinfo
CVE-2024-51523 2024-11-8 05:03 2024-11-5 Show GitHub Exploit DB Packet Storm