Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188881 3.5 注意 シスコシステムズ - Cisco AnyConnect Secure Mobility Client におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-1370 2012-08-7 11:45 2012-08-6 Show GitHub Exploit DB Packet Storm
188882 5 警告 シスコシステムズ - Cisco IOS の MallocLite の実装におけるサービス運用妨害 (ルートプロセッサクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1367 2012-08-7 11:43 2012-08-6 Show GitHub Exploit DB Packet Storm
188883 4 警告 シスコシステムズ - Cisco Unified Computing System におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-DesignError
CVE-2012-1365 2012-08-7 11:04 2012-05-11 Show GitHub Exploit DB Packet Storm
188884 4 警告 シスコシステムズ - Cisco Unified Computing System におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-DesignError
CVE-2012-1364 2012-08-7 11:03 2012-05-11 Show GitHub Exploit DB Packet Storm
188885 5 警告 NetMechanica - NetMechanica NetDecision の Traffic Grapher Server におけるソースコードを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1466 2012-08-6 15:57 2012-03-19 Show GitHub Exploit DB Packet Storm
188886 1.9 注意 X.Org Foundation - X.Org xserver の os/utils.c における任意のファイルのアクセス権を 444 に変更される脆弱性 CWE-362
競合状態
CVE-2011-4029 2012-08-3 14:50 2011-10-17 Show GitHub Exploit DB Packet Storm
188887 1.2 注意 X.Org Foundation - X.Org xserver の os/utils.c における情報漏えいの脆弱性 CWE-59
リンク解釈の問題
CVE-2011-4028 2012-08-3 14:48 2011-10-18 Show GitHub Exploit DB Packet Storm
188888 4.3 警告 ヤフー株式会社 - Yahoo!ツールバー (Chrome 版 / Safari 版) においてツールバーが書き換え可能な脆弱性 CWE-Other
その他
CVE-2012-2647 2012-08-2 16:44 2012-07-30 Show GitHub Exploit DB Packet Storm
188889 5 警告 GoodiWare - GoodReader におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2648 2012-08-2 12:01 2012-08-2 Show GitHub Exploit DB Packet Storm
188890 6.5 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2962 2012-08-1 17:29 2012-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 4:17 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and r… New CWE-79
Cross-site Scripting
CVE-2023-0109 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
482 - - - A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter duri… New CWE-78
OS Command 
CVE-2022-1884 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
483 - - - A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim. This vulnerability affects the … New CWE-79
Cross-site Scripting
CVE-2022-1226 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
484 - - - An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception d… New CWE-285
Improper Authorization
CVE-2021-3991 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
485 - - - A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occurs when editing book properties, such as uploading a cover o… New CWE-79
Cross-site Scripting
CVE-2021-3988 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
486 - - - An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without public shelf permissions to create public shelves. The vulnerability is due to the `… New CWE-284
Improper Access Control
CVE-2021-3987 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
487 - - - A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of … New CWE-209
Information Exposure Through an Error Message
CVE-2021-3986 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
488 - - - An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versio… New CWE-611
XXE
CVE-2021-3902 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
489 - - - sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that… New - CVE-2021-3841 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
490 - - - DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files o… New CWE-502
 Deserialization of Untrusted Data
CVE-2021-3838 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm