Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 9, 2024, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188791 3.5 注意 Authoring HTML - Drupal 用の Authoring HTML モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2725 2012-06-29 10:49 2012-06-6 Show GitHub Exploit DB Packet Storm
188792 2.6 注意 Nextide - Drupal 用の Maestro モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2723 2012-06-29 10:48 2012-06-6 Show GitHub Exploit DB Packet Storm
188793 4.3 警告 Scott Reynen - Drupal 用の Node Embed モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2722 2012-06-29 10:47 2012-06-6 Show GitHub Exploit DB Packet Storm
188794 6.8 警告 Moshe Weitzman - Drupal 用の Organic Groups モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2721 2012-06-29 10:46 2012-06-6 Show GitHub Exploit DB Packet Storm
188795 5 警告 Adam Ross - Drupal 用の Token Authentication モジュールにおける設定以上の権限を持つリクエストを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2720 2012-06-29 10:43 2012-06-6 Show GitHub Exploit DB Packet Storm
188796 5.1 警告 Nextide - Drupal 用の filedepot モジュールにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2719 2012-06-29 10:39 2012-05-30 Show GitHub Exploit DB Packet Storm
188797 4.3 警告 Jason Moore - Drupal 用の Amadou テーマモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2715 2012-06-29 10:37 2012-05-30 Show GitHub Exploit DB Packet Storm
188798 6.8 警告 Isaac Sukin - Drupal 用の BrowserID モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2713 2012-06-29 10:35 2012-05-23 Show GitHub Exploit DB Packet Storm
188799 2.6 注意 Thomas Seidl - Drupal 用の Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2712 2012-06-29 10:29 2012-05-23 Show GitHub Exploit DB Packet Storm
188800 2.1 注意 Nancy Wichmann - Drupal 用 Taxonomy List モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2711 2012-06-29 10:25 2012-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 9, 2024, 6:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834_write_frequency() clk_get_rate() can return 0. In s… Update CWE-369
 Divide By Zero 		CVE-2024-47663 2024-11-9 01:15 2024-10-10 Show GitHub Exploit DB Packet Storm
162 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ===================================… Update CWE-416
 Use After Free 		CVE-2024-49884 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
163 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in ext4_ext_insert_extent(), if the path is … Update CWE-416
 Use After Free 		CVE-2024-49883 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
164 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has bee… Update CWE-415
 Double Free 		CVE-2024-49882 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
165 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be… Update NVD-CWE-noinfo
CVE-2024-46854 2024-11-9 01:15 2024-09-27 Show GitHub Exploit DB Packet Storm
166 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big enough, we free it and set *orig_path … Update CWE-476
 NULL Pointer Dereference 		CVE-2024-49881 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
167 - - - In the Linux kernel, the following vulnerability has been resolved: resource: fix region_intersects() vs add_memory_driver_managed() On a system with CXL memory, the resource tree (/proc/iomem) rel… Update - CVE-2024-49878 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
168 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion [BUG] Syzbot reported a NULL pointer dereference wit… Update CWE-476
 NULL Pointer Dereference 		CVE-2024-49868 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
169 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at close_ctree(), we have the followi… Update CWE-416
 Use After Free 		CVE-2024-49867 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
170 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_check_delete(), which checks whether degene… Update CWE-125
Out-of-bounds Read 		CVE-2024-47757 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm