Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 23, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192511 10 危険 Novell - Novell ZENworks Handheld Management の ZfHIPCND.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0742 2012-03-27 18:43 2011-01-25 Show GitHub Exploit DB Packet Storm
192512 4.3 警告 MODX - ModX Evolution におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0741 2012-03-27 18:43 2011-02-1 Show GitHub Exploit DB Packet Storm
192513 4.3 警告 WordPress.org
pleer		 - WordPress 用の RSS Feed Reader の magpie/scripts/magpie_slashbox.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0740 2012-03-27 18:43 2011-02-1 Show GitHub Exploit DB Packet Storm
192514 6.8 警告 Mikel Lindsaar - Ruby Mail gem の sendmail delivery agent の deliver 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0739 2012-03-27 18:43 2011-02-1 Show GitHub Exploit DB Packet Storm
192515 4.3 警告 Globus
ncsa		 - Globus Toolkit で使用される MyProxy におけるサーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0738 2012-03-27 18:43 2011-01-18 Show GitHub Exploit DB Packet Storm
192516 7.8 危険 Linux - Linux kernel の br_mdb_ip_get 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-0709 2012-03-27 18:43 2011-02-18 Show GitHub Exploit DB Packet Storm
192517 7.5 危険 サン・マイクロシステムズ
レッドハット		 - OpenJDK Runtime Environment の IcedTea-Web における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0706 2012-03-27 18:43 2011-02-15 Show GitHub Exploit DB Packet Storm
192518 3.3 注意 daniel friesel - feh の feh_unique_filename 関数における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0702 2012-03-27 18:43 2011-02-14 Show GitHub Exploit DB Packet Storm
192519 4 警告 WordPress.org - WordPress の wp-admin/async-upload.php における投稿の下書きを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-0701 2012-03-27 18:43 2011-02-7 Show GitHub Exploit DB Packet Storm
192520 10 危険 IBM - IBM TCR で使用される IBM TIP における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2011-0732 2012-03-27 18:43 2010-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1751 - - - Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. CWE-20
 Improper Input Validation  		CVE-2024-21829 2024-09-17 02:16 2024-09-17 Show GitHub Exploit DB Packet Storm
1752 - - - Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or denial of service via local access. CWE-20
 Improper Input Validation  		CVE-2024-21781 2024-09-17 02:16 2024-09-17 Show GitHub Exploit DB Packet Storm
1753 - - - Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access. CWE-92
CVE-2023-43753 2024-09-17 02:16 2024-09-17 Show GitHub Exploit DB Packet Storm
1754 - - - Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. CWE-284
Improper Access Control 		CVE-2023-43626 2024-09-17 02:16 2024-09-17 Show GitHub Exploit DB Packet Storm
1755 - - - A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port o… CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-1635 2024-09-17 02:16 2024-02-20 Show GitHub Exploit DB Packet Storm
1756 6.8 MEDIUM
Physics 		gnu
redhat
fedoraproject 		grub2
enterprise_linux
fedora 		An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protectio… CWE-290
 Authentication Bypass by Spoofing 		CVE-2023-4001 2024-09-17 02:16 2024-01-15 Show GitHub Exploit DB Packet Storm
1757 5.9 MEDIUM
Network 		systemd_project systemd A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the u… NVD-CWE-Other
CVE-2023-7008 2024-09-17 02:16 2023-12-23 Show GitHub Exploit DB Packet Storm
1758 7.8 HIGH
Local 		redhat
fedoraproject 		ansible
extra_packages_for_enterprise_linux
fedora
ansible_automation_platform
ansible_developer
ansible_inside 		A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use… NVD-CWE-Other
CVE-2023-5764 2024-09-17 02:16 2023-12-13 Show GitHub Exploit DB Packet Storm
1759 3.8 LOW
Physics 		opensc_project
redhat
fedoraproject 		opensc
enterprise_linux
fedora 		An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to t… CWE-125
Out-of-bounds Read 		CVE-2023-4535 2024-09-17 02:16 2023-11-7 Show GitHub Exploit DB Packet Storm
1760 7.0 HIGH
Local 		x.org
redhat 		x_server
enterprise_linux 		A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Za… CWE-416
 Use After Free 		CVE-2023-5574 2024-09-17 02:16 2023-10-26 Show GitHub Exploit DB Packet Storm