Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 5, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192031 6.8 警告 ImageMagick
レッドハット		 - Imagemagick の ReadDIBImage() 関数におけるバッファオーバーフローの脆弱性 CWE-119
CWE-189
CVE-2007-4988 2012-06-26 14:16 2007-09-24 Show GitHub Exploit DB Packet Storm
192032 9.3 危険 ImageMagick - Imagemagick の ReadBlobString() 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題 		CVE-2007-4987 2012-06-26 14:16 2007-09-24 Show GitHub Exploit DB Packet Storm
192033 7.5 危険 サイバートラスト株式会社
ImageMagick
レッドハット		 - Imagemagick の複数の複数のイメージファイル処理の不備によるバッファオーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-4986 2012-06-26 14:15 2007-09-24 Show GitHub Exploit DB Packet Storm
192034 4.3 警告 サイバートラスト株式会社
ImageMagick
レッドハット		 - Imagemagick の関数の呼び出し処理の不備によるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-DesignError
CVE-2007-4985 2012-06-26 14:15 2007-09-24 Show GitHub Exploit DB Packet Storm
192035 5 警告 サイバートラスト株式会社
ImageMagick
ターボリナックス
レッドハット		 - ImageMagick の XWD ファイルの処理における無限ループが発生する脆弱性 - CVE-2005-1739 2012-06-26 14:15 2005-05-21 Show GitHub Exploit DB Packet Storm
192036 7.5 危険 ターボリナックス
レッドハット		 - ImageMagick の SGI ファイルの取り扱いにおけるバッファオーバーフローの脆弱性 - CVE-2005-0762 2012-06-26 14:14 2005-03-23 Show GitHub Exploit DB Packet Storm
192037 5 警告 ターボリナックス
レッドハット		 - ImageMagick における不正な PSD ファイルによるサービス運用妨害 (DoS) の脆弱性 - CVE-2005-0761 2012-06-26 14:14 2005-03-23 Show GitHub Exploit DB Packet Storm
192038 5 警告 ターボリナックス
レッドハット		 - ImageMagick の TIFF デコーダにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2005-0760 2012-06-26 14:14 2005-03-23 Show GitHub Exploit DB Packet Storm
192039 6.9 警告 IBM - IBM AIX の libodm.a における任意のファイルを上書される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2179 2012-06-26 14:12 2012-05-16 Show GitHub Exploit DB Packet Storm
192040 4.3 警告 IBM - IBM System Storage DS Storage Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2172 2012-06-26 14:11 2012-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 5, 2024, 8:11 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
961 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: fix deadlock in show_meminfo() There is a real deadlock as well as sleeping in atomic() bug in here, if the bo put… CWE-667
 Improper Locking 		CVE-2024-46867 2024-10-2 02:09 2024-09-27 Show GitHub Exploit DB Packet Storm
962 2.7 LOW
Network 		formtools form_tools A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curl_exec of the file /admin/forms/option_lists/edit.php of the component I… NVD-CWE-Other
CVE-2024-6937 2024-10-2 01:51 2024-07-21 Show GitHub Exploit DB Packet Storm
963 6.5 MEDIUM
Network 		devolutions devolutions_server Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing inte… CWE-863
 Incorrect Authorization 		CVE-2024-6512 2024-10-2 01:36 2024-09-25 Show GitHub Exploit DB Packet Storm
964 6.1 MEDIUM
Network 		collne welcart The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used ag… CWE-79
Cross-site Scripting 		CVE-2023-5951 2024-10-2 01:35 2023-12-5 Show GitHub Exploit DB Packet Storm
965 5.4 MEDIUM
Network 		uploading_svg\
_webp_and_ico_files_project 		uploading_svg\
_webp_and_ico_files 		The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XS… CWE-79
Cross-site Scripting 		CVE-2023-4460 2024-10-2 01:35 2023-12-5 Show GitHub Exploit DB Packet Storm
966 5.3 MEDIUM
Network 		microsoft windows_server_2012
windows_server_2016
windows_server_2019
windows_server_2022 		DHCP Server Service Information Disclosure Vulnerability CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2023-29355 2024-10-2 01:35 2023-06-14 Show GitHub Exploit DB Packet Storm
967 5.3 MEDIUM
Network 		atlassian confluence_data_center
confluence_server 		Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Informa… NVD-CWE-noinfo
CVE-2023-22503 2024-10-2 01:35 2023-05-2 Show GitHub Exploit DB Packet Storm
968 5.4 MEDIUM
Network 		strangerstudios paid_memberships_pro The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as lo… CWE-79
Cross-site Scripting 		CVE-2022-4830 2024-10-2 01:35 2023-02-14 Show GitHub Exploit DB Packet Storm
969 5.4 MEDIUM
Network 		3dflipbook 3d_flipbook The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Con… CWE-79
Cross-site Scripting 		CVE-2022-4453 2024-10-2 01:35 2023-01-17 Show GitHub Exploit DB Packet Storm
970 9.8 CRITICAL
Network 		doverfuelingsolutions progauge_maglink_lx_console_firmware
progauge_maglink_lx4_console_firmware 		An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly. NVD-CWE-Other
CVE-2024-43692 2024-10-2 01:22 2024-09-25 Show GitHub Exploit DB Packet Storm