Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Sept. 29, 2024, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 192171 | 7.5 | 危険 | TP-LINK Technologies | - | TP-Link 8840T の初期設定に問題 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-2440 | 2012-05-1 12:21 | 2012-04-3 | Show | GitHub Exploit DB Packet Storm |
| 192172 | 1.8 | 注意 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-2425 | 2012-04-27 15:48 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192173 | 1.8 | 注意 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2012-2424 | 2012-04-27 15:47 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192174 | 1.8 | 注意 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-2423 | 2012-04-27 15:46 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192175 | 2.9 | 注意 | Intuit | - | Intuit QuickBooks におけるパス名の情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-2422 | 2012-04-27 15:04 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192176 | 1.8 | 注意 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおける絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-2421 | 2012-04-27 15:03 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192177 | 1.8 | 注意 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-2420 | 2012-04-27 15:02 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192178 | 1.8 | 注意 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (メモリ破損) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-2419 | 2012-04-27 15:00 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192179 | 6.8 | 警告 | Intuit | - | Intuit QuickBooks の intu-help-qb ハンドラにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-2418 | 2012-04-27 14:49 | 2012-04-25 | Show | GitHub Exploit DB Packet Storm |
| 192180 | 4.6 | 警告 | サイバートラスト株式会社 Net_SSLeay Canonical |
- | Perl モジュール Net::SSLeay.pm の entropy ソースの扱いに関する脆弱性 | - | CVE-2005-0106 | 2012-04-27 14:12 | 2005-05-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Sept. 30, 2024, 5:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 121 | 8.1 |
HIGH
Network |
zoom |
meeting_software_development_kit rooms zoom |
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access. Update |
CWE-668
Exposure of Resource to Wrong Sphere |
CVE-2023-39214 | 2024-09-28 05:15 | 2023-08-9 | Show | GitHub Exploit DB Packet Storm |
| 122 | 9.8 |
CRITICAL
Network
zoom
|
virtual_desktop_infrastructure |
zoom
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network acc…
Update
|
CWE-74
|
Injection
CVE-2023-39213
|
2024-09-28 05:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 123 | 7.5 |
HIGH
Network
zoom
|
meeting_software_development_kit |
video_software_development_kit
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
Update
|
NVD-CWE-noinfo
|
CVE-2023-39217
|
2024-09-28 05:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 124 | 9.8 |
CRITICAL
Network
zoom
|
zoom
|
Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
Update
|
NVD-CWE-noinfo
|
CVE-2023-39216
|
2024-09-28 05:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 125 | 5.7 |
MEDIUM
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks. Update |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2024-7698 | 2024-09-28 04:39 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 126 | 8.1 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SR… Update |
NVD-CWE-noinfo
|
CVE-2024-43391 | 2024-09-28 04:38 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 127 | 8.1 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS. Update |
NVD-CWE-noinfo
|
CVE-2024-43390 | 2024-09-28 04:37 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 128 | 8.1 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP … Update |
NVD-CWE-noinfo
|
CVE-2024-43393 | 2024-09-28 04:36 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 129 | 8.1 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS. Update |
NVD-CWE-noinfo
|
CVE-2024-43389 | 2024-09-28 04:36 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 130 | - | - | - | Directory Traversal vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the getFileNameFromConnection method in DownloadTask New | - | CVE-2024-33369 | 2024-09-28 04:35 | 2024-09-28 | Show | GitHub Exploit DB Packet Storm |