Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189111 4.3 警告 オラクル - Oracle Siebel CRM の UI Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1761 2012-07-20 10:53 2012-07-17 Show GitHub Exploit DB Packet Storm
189112 4.3 警告 オラクル - Oracle Siebel CRM の UI Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1760 2012-07-20 10:53 2012-07-17 Show GitHub Exploit DB Packet Storm
189113 4 警告 オラクル - Oracle Siebel CRM の UI Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1754 2012-07-20 10:52 2012-07-17 Show GitHub Exploit DB Packet Storm
189114 5 警告 オラクル - Oracle Siebel CRM の UI Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1742 2012-07-20 10:51 2012-07-17 Show GitHub Exploit DB Packet Storm
189115 4 警告 オラクル - Oracle Siebel CRM の UI Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1732 2012-07-20 10:50 2012-07-17 Show GitHub Exploit DB Packet Storm
189116 6.8 警告 オラクル - Oracle Siebel CRM の Web UI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1731 2012-07-20 10:49 2012-07-17 Show GitHub Exploit DB Packet Storm
189117 5.8 警告 オラクル - Oracle Siebel CRM の Portal Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1728 2012-07-20 10:49 2012-07-17 Show GitHub Exploit DB Packet Storm
189118 4 警告 オラクル - Oracle MySQL Server における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1757 2012-07-20 10:31 2012-07-17 Show GitHub Exploit DB Packet Storm
189119 4 警告 オラクル - Oracle MySQL Server における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1756 2012-07-20 10:30 2012-07-17 Show GitHub Exploit DB Packet Storm
189120 6.8 警告 オラクル - Oracle MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1735 2012-07-20 10:28 2012-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
511 - - - In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution p… Update - CVE-2024-23715 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
512 - - - In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional e… Update - CVE-2023-35686 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
513 - - - In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no a… Update - CVE-2023-35659 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
514 - - - A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafa… Update - CVE-2024-9476 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
515 - - - The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in… Update - CVE-2024-9413 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
516 - - - Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, r… Update CWE-22
CWE-552
Path Traversal
 Files or Directories Accessible to External Parties 		CVE-2024-52292 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
517 - - - Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This e… Update CWE-22
Path Traversal 		CVE-2024-52291 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
518 - - - Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted i… Update CWE-287
CWE-289
Improper Authentication
 Authentication Bypass by Alternate Name 		CVE-2024-51996 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
519 - - - Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixe… Update CWE-79
Cross-site Scripting 		CVE-2024-45594 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
520 - - - A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPrevi… New CWE-22
Path Traversal 		CVE-2024-11238 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm