Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 5, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192051 7.5 危険 サイバートラスト株式会社
ターボリナックス
レッドハット
- ImageMagick の不正なファイル名の処理によるフォーマットストリングの脆弱性 - CVE-2005-0397 2012-06-26 12:26 2005-03-3 Show GitHub Exploit DB Packet Storm
192052 10 危険 サイバートラスト株式会社
ターボリナックス
レッドハット
- ImageMagick の不正な EXIF ファイルの処理によるバッファオーバーフローの脆弱性 - CVE-2004-0981 2012-06-26 12:23 2004-10-27 Show GitHub Exploit DB Packet Storm
192053 10 危険 xmlsoft.org
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット
- libxml2 の xmlParseAttValueComplex 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3529 2012-06-26 11:05 2008-09-1 Show GitHub Exploit DB Packet Storm
192054 2.1 注意 w1.fi - hostapd における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2389 2012-06-25 16:49 2012-06-21 Show GitHub Exploit DB Packet Storm
192055 7.5 危険 The Document Foundation
OpenOffice.org Project
- OpenOffice.org および LibreOffice の vclmi.dll モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-1149 2012-06-25 16:47 2012-05-16 Show GitHub Exploit DB Packet Storm
192056 6.2 警告 CITI - libgssapi および libgssglue における信頼されていない設定ファイルをロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2709 2012-06-25 16:38 2012-06-21 Show GitHub Exploit DB Packet Storm
192057 2.1 注意 Fabrice Bellard - Qemu の os-posix.c におけるホスト上の制限付きファイルにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2527 2012-06-25 16:37 2011-07-9 Show GitHub Exploit DB Packet Storm
192058 5.8 警告 KVM Group - qemu-kvm の virtio_queue_notify におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2512 2012-06-25 16:36 2012-06-21 Show GitHub Exploit DB Packet Storm
192059 5 警告 Linux - Linux Kernel の fs/proc/root.c におけるサービス運用妨害 (リファレンスリークおよびメモリ消費) の脆弱性 CWE-119
バッファエラー
CVE-2012-2127 2012-06-25 16:34 2012-06-21 Show GitHub Exploit DB Packet Storm
192060 6.4 警告 Linux - Linux Kernel の ROSE プロトコルの実装における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4914 2012-06-25 16:26 2012-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 5, 2024, 4:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 7.5 HIGH
Network
duckdb duckdb DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in filesystem is accessible for reading using `sniff_csv`, even with `enable_external_access=false`. This vulnerabilit… NVD-CWE-noinfo
CVE-2024-41672 2024-10-2 05:33 2024-07-25 Show GitHub Exploit DB Packet Storm
922 9.8 CRITICAL
Network
tenda o3_firmware A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been declared as critical. This vulnerability affects the function fromMacFilterSet of the file /goform/setMacFilter. The manipulation of … CWE-787
 Out-of-bounds Write
CVE-2024-7151 2024-10-2 05:28 2024-07-28 Show GitHub Exploit DB Packet Storm
923 6.5 MEDIUM
Adjacent
- - An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacent downstream RSVP neighbo… - CVE-2024-39560 2024-10-2 05:15 2024-07-11 Show GitHub Exploit DB Packet Storm
924 7.8 HIGH
Local
restsharp restsharp RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to `RestRequest.AddHeader` (the header value) is vulnerable to CRLF injection. The same applies to `RestRequest.AddOrUpdat… CWE-74
Injection
CVE-2024-45302 2024-10-2 05:05 2024-08-30 Show GitHub Exploit DB Packet Storm
925 8.0 HIGH
Network
strawberryrocks strawberry Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in … CWE-352
 Origin Validation Error
CVE-2024-47082 2024-10-2 05:01 2024-09-26 Show GitHub Exploit DB Packet Storm
926 7.5 HIGH
Network
watchguard single_sign-on_client Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network acc… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2024-6594 2024-10-2 04:41 2024-09-25 Show GitHub Exploit DB Packet Storm
927 9.1 CRITICAL
Network
watchguard authentication_gateway Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. This… CWE-863
 Incorrect Authorization
CVE-2024-6593 2024-10-2 04:37 2024-09-25 Show GitHub Exploit DB Packet Storm
928 6.7 MEDIUM
Local
linuxfoundation
mediatek
google
yocto
iot_yocto
android
In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User… CWE-787
 Out-of-bounds Write
CVE-2023-32811 2024-10-2 04:35 2023-09-4 Show GitHub Exploit DB Packet Storm
929 6.5 MEDIUM
Local
linuxfoundation
mediatek
google
linux
yocto
iot_yocto
android
linux_kernel
In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is… CWE-416
 Use After Free
CVE-2023-20849 2024-10-2 04:35 2023-09-4 Show GitHub Exploit DB Packet Storm
930 8.8 HIGH
Network
google
debian
fedoraproject
chrome
debian_linux
fedora
Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2023-4353 2024-10-2 04:35 2023-08-16 Show GitHub Exploit DB Packet Storm