Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 8, 2024, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188941 7.5 危険 Accoria Networks - Accoria Web Server の authcfg.cgi におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2010-2271 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
188942 7.5 危険 Accoria Networks - Accoria Web Server におけるセッションをハイジャックされる脆弱性 CWE-310
暗号の問題 		CVE-2010-2270 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
188943 5 警告 Accoria Networks - Accoria Web Server の loadstatic.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2269 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
188944 6.8 警告 Accoria Networks - Accoria Web Server の authcfg.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2268 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
188945 4.3 警告 Accoria Networks - Accoria Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2267 2012-06-26 16:19 2010-06-15 Show GitHub Exploit DB Packet Storm
188946 4.3 警告 アップル
マイクロソフト		 - Apple Safari の CSS 実装における訪問した Web ページに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2264 2012-06-26 16:19 2010-06-7 Show GitHub Exploit DB Packet Storm
188947 5 警告 galileo students - Galileo Students Team Weborf におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2262 2012-06-26 16:19 2010-06-3 Show GitHub Exploit DB Packet Storm
188948 4.3 警告 gambitdesign - Gambit Design Bandwidth Meter におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2260 2012-06-26 16:19 2010-06-9 Show GitHub Exploit DB Packet Storm
188949 4.3 警告 eschew - phpBannerExchange Arabic の signupconfirm.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2258 2012-06-26 16:19 2010-06-9 Show GitHub Exploit DB Packet Storm
188950 6.8 警告 Apache Software Foundation - Apache CouchDB におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2234 2012-06-26 16:19 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 8, 2024, 6:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 - - - In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook The commit 1879445dfa7b ("perf/core: Set even… Update - CVE-2021-47006 2024-11-8 01:35 2024-02-28 Show GitHub Exploit DB Packet Storm
232 - - - A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive use… Update - CVE-2023-42953 2024-11-8 01:35 2024-02-21 Show GitHub Exploit DB Packet Storm
233 8.0 HIGH
Adjacent 		zephyrproject zephyr The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in… Update CWE-416
 Use After Free 		CVE-2023-1902 2024-11-8 01:35 2023-07-11 Show GitHub Exploit DB Packet Storm
234 8.0 HIGH
Adjacent 		zephyrproject zephyr The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling referenc… Update CWE-787
 Out-of-bounds Write 		CVE-2023-1901 2024-11-8 01:35 2023-07-11 Show GitHub Exploit DB Packet Storm
235 9.8 CRITICAL
Network 		nazgul nostromo_nhttpd Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. Update CWE-22
Path Traversal 		CVE-2019-16278 2024-11-8 01:35 2019-10-15 Show GitHub Exploit DB Packet Storm
236 - - - The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often use… New - CVE-2024-8378 2024-11-8 01:15 2024-11-8 Show GitHub Exploit DB Packet Storm
237 6.5 MEDIUM
Network 		- - A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames… New CWE-287
Improper Authentication 		CVE-2024-10963 2024-11-8 01:15 2024-11-8 Show GitHub Exploit DB Packet Storm
238 - - - There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame… New - CVE-2024-10668 2024-11-8 01:15 2024-11-8 Show GitHub Exploit DB Packet Storm
239 - - - Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were not checked by the security policy. They are now checked via the property polic… New CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2024-51755 2024-11-8 01:15 2024-11-7 Show GitHub Exploit DB Packet Storm
240 - - - Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 20… Update - CVE-2024-6245 2024-11-8 01:15 2024-10-29 Show GitHub Exploit DB Packet Storm