Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188871 5.8 警告 シスコシステムズ - Cisco AnyConnect Secure Mobility Client の IPsec の実装におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2012-2499 2012-08-8 14:29 2012-08-6 Show GitHub Exploit DB Packet Storm
188872 4 警告 シスコシステムズ - Cisco AnyConnect Secure Mobility Client におけるサーバになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2012-2498 2012-08-8 14:28 2012-08-6 Show GitHub Exploit DB Packet Storm
188873 5 警告 シスコシステムズ - Cisco IP Communicator における証明書信頼リストを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2490 2012-08-8 14:25 2012-08-6 Show GitHub Exploit DB Packet Storm
188874 4 警告 シスコシステムズ - Cisco ASA 5500 シリーズデバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-200
情報漏えい
CVE-2012-2474 2012-08-8 14:24 2012-08-6 Show GitHub Exploit DB Packet Storm
188875 7.8 危険 シスコシステムズ - Cisco ASA 5500 シリーズデバイスにおけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2472 2012-08-8 14:24 2012-08-6 Show GitHub Exploit DB Packet Storm
188876 7.8 危険 シスコシステムズ - Cisco Nexus 7000 シリーズスイッチ上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-2469 2012-08-8 14:20 2011-07-29 Show GitHub Exploit DB Packet Storm
188877 5 警告 シスコシステムズ - Cisco Carrier Routing System におけるアクセス制御リストのエントリを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1342 2012-08-8 14:17 2011-07-9 Show GitHub Exploit DB Packet Storm
188878 5 警告 シスコシステムズ - Cisco MDS NX-OS の FCIP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-1340 2012-08-8 14:16 2012-01-23 Show GitHub Exploit DB Packet Storm
188879 5 警告 シスコシステムズ - Cisco Unified Computing System におけるサービス運用妨害 (プロセスクラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2012-1339 2012-08-8 14:12 2012-03-22 Show GitHub Exploit DB Packet Storm
188880 4 警告 フェンリル株式会社 - Sleipnir Mobile for Android において任意のスクリプトが実行される脆弱性 CWE-Other
その他
CVE-2012-4004 2012-08-8 14:02 2012-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 12:12 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 - - - A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbi… - CVE-2024-50839 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
652 - - - Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1. This vulnerability could allow remote users to byp… CWE-22
Path Traversal
CVE-2024-11215 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
653 - - - A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authe… CWE-287
Improper Authentication
CVE-2024-11209 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
654 - - - A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiratio… CWE-613
 Insufficient Session Expiration
CVE-2024-11208 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
655 8.8 HIGH
Network
- - The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replac… CWE-502
 Deserialization of Untrusted Data
CVE-2024-10962 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
656 - - - An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2. The vulnerability could allow an attacker to inject malicious Ja… CWE-79
Cross-site Scripting
CVE-2024-8648 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
657 - - - An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2024-7404 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
658 - - - A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirec… CWE-601
Open Redirect
CVE-2024-11207 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
659 - - - Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arb… - CVE-2024-10979 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
660 - - - Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For example, a man-in-the-… - CVE-2024-10977 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm