Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 5, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192011 5.1 警告 アップル - LaunchServices の Download Validation における Javascript を実行される脆弱性 - CVE-2006-3504 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192012 5.1 警告 アップル - Apple Mac OS X の ImageIO における整数オーバーフローの脆弱性 - CVE-2006-3503 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192013 5.1 警告 アップル - Apple Mac OS X の ImageIO におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3502 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192014 5.1 警告 アップル - ImageIO における整数オーバーフローの脆弱性 - CVE-2006-3501 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192015 7.2 危険 アップル - Apple Mac OS X の動的リンカーにおける任意のコードを実行される脆弱性 - CVE-2006-3500 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192016 2.1 注意 アップル - Mac OS X の動的リンカーにおける重要な情報を取得される脆弱性 - CVE-2006-3499 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192017 10 危険 アップル - DHCP コンポーネントの bootpd におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3498 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192018 5.1 警告 アップル - Apple Mac OS X 用 Bom の "圧縮ステート処理" におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2006-3497 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192019 5 警告 アップル - Apple Mac OS X の AFP Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3496 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
192020 2.1 注意 アップル - Apple Mac OS X の AFP Server における他のユーザのファイルにアクセスされる脆弱性 - CVE-2006-3495 2012-06-26 15:37 2006-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 6, 2024, 5:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 6.7 MEDIUM
Local
linuxfoundation
mediatek
google
yocto
iot_yocto
android
In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User… CWE-787
 Out-of-bounds Write
CVE-2023-32811 2024-10-2 04:35 2023-09-4 Show GitHub Exploit DB Packet Storm
1002 6.5 MEDIUM
Local
linuxfoundation
mediatek
google
linux
yocto
iot_yocto
android
linux_kernel
In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is… CWE-416
 Use After Free
CVE-2023-20849 2024-10-2 04:35 2023-09-4 Show GitHub Exploit DB Packet Storm
1003 8.8 HIGH
Network
google
debian
fedoraproject
chrome
debian_linux
fedora
Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2023-4353 2024-10-2 04:35 2023-08-16 Show GitHub Exploit DB Packet Storm
1004 7.5 HIGH
Network
apache apache-airflow-providers-apache-drill Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in m… CWE-20
 Improper Input Validation 
CVE-2023-39553 2024-10-2 04:35 2023-08-11 Show GitHub Exploit DB Packet Storm
1005 9.1 CRITICAL
Network
apache traffic_server Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1. CWE-444
HTTP Request Smuggling
CVE-2023-33934 2024-10-2 04:35 2023-08-9 Show GitHub Exploit DB Packet Storm
1006 7.5 HIGH
Network
apache traffic_server Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1. CWE-20
 Improper Input Validation 
CVE-2022-47185 2024-10-2 04:35 2023-08-9 Show GitHub Exploit DB Packet Storm
1007 4.4 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long,… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2024-42154 2024-10-2 04:32 2024-07-30 Show GitHub Exploit DB Packet Storm
1008 7.5 HIGH
Network
circutor q-smt_firmware An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have no expiration date to access the web app… CWE-613
 Insufficient Session Expiration
CVE-2024-8888 2024-10-2 04:30 2024-09-18 Show GitHub Exploit DB Packet Storm
1009 7.8 HIGH
Local
grafana alloy Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-r… CWE-428
 Unquoted Search Path or Element
CVE-2024-8975 2024-10-2 04:20 2024-09-26 Show GitHub Exploit DB Packet Storm
1010 7.8 HIGH
Local
grafana agent Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2 CWE-428
 Unquoted Search Path or Element
CVE-2024-8996 2024-10-2 04:16 2024-09-26 Show GitHub Exploit DB Packet Storm