Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 27, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192001 10 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0181 2012-05-10 18:12 2012-05-8 Show GitHub Exploit DB Packet Storm
192002 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0180 2012-05-10 18:11 2012-05-8 Show GitHub Exploit DB Packet Storm
192003 9.3 危険 マイクロソフト - Windows 上で稼働する Microsoft Silverlight におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0176 2012-05-10 18:09 2012-05-8 Show GitHub Exploit DB Packet Storm
192004 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0167 2012-05-10 18:08 2012-05-8 Show GitHub Exploit DB Packet Storm
192005 9.3 危険 マイクロソフト - 複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0165 2012-05-10 18:04 2012-05-8 Show GitHub Exploit DB Packet Storm
192006 5 警告 マイクロソフト - Microsoft .NET Framework 4 におけるサービス運用妨害 (アプリケーションハング) の脆弱性 CWE-DesignError
CVE-2012-0164 2012-05-10 17:58 2012-05-8 Show GitHub Exploit DB Packet Storm
192007 9.3 危険 マイクロソフト - Microsoft .NET Framework 4 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0162 2012-05-10 17:57 2012-05-8 Show GitHub Exploit DB Packet Storm
192008 6.8 警告 マイクロソフト - 複数の Microsoft Windows 製品の partmgr.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0178 2012-05-10 17:08 2012-05-8 Show GitHub Exploit DB Packet Storm
192009 6.8 警告 マイクロソフト - Microsoft Windows Server 2008 R2 および Windows 7 の tcpip.sys におけるメモリ二重解放の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0179 2012-05-10 16:09 2012-05-8 Show GitHub Exploit DB Packet Storm
192010 1.7 注意 マイクロソフト - 複数の Microsoft Windows 製品の Windows ファイアウォールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0174 2012-05-10 16:09 2012-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 27, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 - - - An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module. New - CVE-2024-41708 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
242 - - - OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timin… New - CVE-2024-22893 2024-09-26 23:35 2024-09-26 Show GitHub Exploit DB Packet Storm
243 9.8 CRITICAL
Network 		apache submarine ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do… Update CWE-863
 Incorrect Authorization 		CVE-2024-36265 2024-09-26 23:35 2024-06-13 Show GitHub Exploit DB Packet Storm
244 5.3 MEDIUM
Network 		azmobileapps color_phone The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.a… Update NVD-CWE-noinfo
CVE-2023-42468 2024-09-26 23:35 2023-09-14 Show GitHub Exploit DB Packet Storm
245 7.5 HIGH
Network 		netentsec ns-asg_firmware netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway. Update NVD-CWE-Other
CVE-2023-40850 2024-09-26 23:35 2023-09-14 Show GitHub Exploit DB Packet Storm
246 2.9 LOW
Physics 		opensc_project
redhat 		opensc
enterprise_linux 		A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using… Update CWE-787
 Out-of-bounds Write 		CVE-2024-8443 2024-09-26 23:34 2024-09-10 Show GitHub Exploit DB Packet Storm
247 9.8 CRITICAL
Network 		apache submarine ** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, w… Update CWE-798
 Use of Hard-coded Credentials 		CVE-2024-36264 2024-09-26 23:32 2024-06-12 Show GitHub Exploit DB Packet Storm
248 7.8 HIGH
Local 		luxion keyshot
keyshot_viewer 		Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion Key… Update CWE-416
 Use After Free 		CVE-2024-30375 2024-09-26 23:24 2024-06-7 Show GitHub Exploit DB Packet Storm
249 7.8 HIGH
Local 		luxion keyshot
keyshot_viewer 		Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxio… Update CWE-787
 Out-of-bounds Write 		CVE-2024-30374 2024-09-26 23:22 2024-06-7 Show GitHub Exploit DB Packet Storm
250 8.8 HIGH
Network 		volkov wp_accessibility_helper Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.5. Update CWE-862
 Missing Authorization 		CVE-2024-31423 2024-09-26 23:19 2024-06-10 Show GitHub Exploit DB Packet Storm