Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 23, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191211 6.8 警告 Rahul Singla - Drupal 用 Take Control モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2341 2012-05-22 11:16 2012-05-18 Show GitHub Exploit DB Packet Storm
191212 6.9 警告 ヒューレット・パッカード - HP OpenVMS の ACMELOGIN の実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2010 2012-05-22 11:14 2012-05-17 Show GitHub Exploit DB Packet Storm
191213 9.3 危険 アドビシステムズ - Adobe Photoshop におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2028 2012-05-21 17:08 2012-05-8 Show GitHub Exploit DB Packet Storm
191214 10 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0780 2012-05-21 17:06 2012-05-8 Show GitHub Exploit DB Packet Storm
191215 2.6 注意 Lunascape - iLunascape for Android における WebView クラスに関する脆弱性 CWE-Other
その他 		CVE-2012-1249 2012-05-21 12:01 2012-05-21 Show GitHub Exploit DB Packet Storm
191216 5 警告 Python Software Foundation - Python の asyncore モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-3492 2012-05-18 16:50 2010-08-14 Show GitHub Exploit DB Packet Storm
191217 3.3 注意 freedesktop.org - D-Bus の configure スクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-2533 2012-05-18 16:47 2011-06-22 Show GitHub Exploit DB Packet Storm
191218 4.6 警告 D-Bus
レッドハット		 - Linux Kernel の dbus-marshal-header.c 内にある _dbus_header_byteswap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2200 2012-05-18 16:45 2011-06-10 Show GitHub Exploit DB Packet Storm
191219 9.3 危険 アップル
FreeType Project
レッドハット		 - Apple iOS などの製品で使用される FreeType における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2011-0226 2012-05-18 16:42 2011-07-8 Show GitHub Exploit DB Packet Storm
191220 7.2 危険 Linux - Linux Kernel の HFS Plus ファイルシステムの実装におけるバッファオーバーフローの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2319 2012-05-18 16:32 2012-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 - - - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via… Update - CVE-2024-24691 2024-09-21 00:15 2024-02-14 Show GitHub Exploit DB Packet Storm
202 - - - Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access. Update - CVE-2024-24690 2024-09-21 00:15 2024-02-14 Show GitHub Exploit DB Packet Storm
203 7.8 HIGH
Local 		zoom zoom
video_software_development_kit
meeting_software_development_kit
virtual_desktop_infrastructure 		Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of p… Update NVD-CWE-noinfo
CVE-2023-49647 2024-09-21 00:15 2024-01-13 Show GitHub Exploit DB Packet Storm
204 6.5 MEDIUM
Network 		zoom zoom
virtual_desktop_infrastructure
meeting_software_development_kit
video_software_development_kit 		Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access. Update CWE-287
Improper Authentication 		CVE-2023-49646 2024-09-21 00:15 2023-12-14 Show GitHub Exploit DB Packet Storm
205 6.5 MEDIUM
Network 		zoom meetings
virtual_desktop_infrastructure
zoom 		Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access. Update NVD-CWE-Other
CVE-2023-43588 2024-09-21 00:15 2023-11-15 Show GitHub Exploit DB Packet Storm
206 7.5 HIGH
Network 		litellm litellm A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/c… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-6587 2024-09-20 23:55 2024-09-14 Show GitHub Exploit DB Packet Storm
207 9.8 CRITICAL
Network 		thinkphp thinkphp A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-44902 2024-09-20 23:55 2024-09-10 Show GitHub Exploit DB Packet Storm
208 9.1 CRITICAL
Network 		baxter connex_health_portal In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex po… NVD-CWE-noinfo
CVE-2024-6796 2024-09-20 23:53 2024-09-10 Show GitHub Exploit DB Packet Storm
209 9.8 CRITICAL
Network 		baxter connex_health_portal In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.… CWE-89
SQL Injection 		CVE-2024-6795 2024-09-20 23:53 2024-09-10 Show GitHub Exploit DB Packet Storm
210 9.8 CRITICAL
Network 		sfs winsure Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection.This issue affects ww.Winsure: before 4.6.2. CWE-94
Code Injection 		CVE-2024-7104 2024-09-20 23:44 2024-09-17 Show GitHub Exploit DB Packet Storm