Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 7, 2024, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191611 4.9 警告 FreeBSD - FreeBSD の ffs_rdextattr 関数における整数オーバーフローの脆弱性 - CVE-2006-5824 2012-06-26 15:37 2006-11-9 Show GitHub Exploit DB Packet Storm
191612 7.5 危険 シトリックス・システムズ - ImaSystem.dll for Citrix MetaFrame XP および Presentation Server におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5821 2012-06-26 15:37 2006-11-8 Show GitHub Exploit DB Packet Storm
191613 9.3 危険 AOL - America Online Security Edition の Sb.SuperBuddy.1 の LinkSBIcons メソッドにおける任意のコードを実行される脆弱性 - CVE-2006-5820 2012-06-26 15:37 2007-04-2 Show GitHub Exploit DB Packet Storm
191614 7.5 危険 dmitry sheiko - BCWB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5816 2012-06-26 15:37 2006-11-8 Show GitHub Exploit DB Packet Storm
191615 4.6 警告 シスコシステムズ - CSD のインストールにおける権限を取得される脆弱性 - CVE-2006-5808 2012-06-26 15:37 2006-11-8 Show GitHub Exploit DB Packet Storm
191616 4.6 警告 シスコシステムズ - CSD における安全なデスクトップ環境から逃避される脆弱性 - CVE-2006-5807 2012-06-26 15:37 2006-11-8 Show GitHub Exploit DB Packet Storm
191617 2.1 注意 シスコシステムズ - Cisco Secure Desktop の SSL VPN Client における暗号化されていないデータを読まれる脆弱性 - CVE-2006-5806 2012-06-26 15:37 2006-11-8 Show GitHub Exploit DB Packet Storm
191618 7.5 危険 advanced guestbook - Advanced Guestbook の admin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5804 2012-06-26 15:37 2006-11-8 Show GitHub Exploit DB Packet Storm
191619 7.5 危険 e107.org - e107 の class2.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5786 2012-06-26 15:37 2006-11-7 Show GitHub Exploit DB Packet Storm
191620 7.5 危険 creasito - Creasito E-Commerce Content Manager における認証を回避される脆弱性 - CVE-2006-5777 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 7, 2024, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2671 6.5 MEDIUM
Network 		litellm litellm berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality. This vulnerability allows attackers to perform unauthorized actions such as creating, up… NVD-CWE-noinfo
CVE-2024-5710 2024-09-21 03:04 2024-06-28 Show GitHub Exploit DB Packet Storm
2672 9.8 CRITICAL
Network 		litellm litellm BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts env… CWE-94
Code Injection 		CVE-2024-5751 2024-09-21 03:01 2024-06-28 Show GitHub Exploit DB Packet Storm
2673 7.2 HIGH
Network 		ibm websphere_application_server IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted … NVD-CWE-Other
CVE-2024-35154 2024-09-21 02:46 2024-07-10 Show GitHub Exploit DB Packet Storm
2674 4.7 MEDIUM
Network 		openjsf serve-static serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0. CWE-79
Cross-site Scripting 		CVE-2024-43800 2024-09-21 02:36 2024-09-11 Show GitHub Exploit DB Packet Storm
2675 4.3 MEDIUM
Network 		ibm concert IBM Concert 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this li… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-43180 2024-09-21 02:28 2024-09-13 Show GitHub Exploit DB Packet Storm
2676 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. … NVD-CWE-noinfo
CVE-2024-46801 2024-09-21 02:18 2024-09-18 Show GitHub Exploit DB Packet Storm
2677 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMI… CWE-416
 Use After Free 		CVE-2024-46800 2024-09-21 02:18 2024-09-18 Show GitHub Exploit DB Packet Storm
2678 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could acc… NVD-CWE-noinfo
CVE-2024-46675 2024-09-21 02:18 2024-09-13 Show GitHub Exploit DB Packet Storm
2679 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allows remote attackers to disclose sensitive… NVD-CWE-Other
CVE-2023-46389 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm
2680 7.5 HIGH
Network 		loytec linx-212_firmware
linx-151_firmware 		LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows remote attackers to disclose smtp clien… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2023-46388 2024-09-21 02:15 2023-12-1 Show GitHub Exploit DB Packet Storm