Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192691 5 警告 Majordomo 2 - Majordomo の_list_file_get 関数における任意のファイルを読まれる脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0063 2012-03-27 18:42 2011-03-15 Show GitHub Exploit DB Packet Storm
192692 4.3 警告 cgiirc - CGI:IRC の nonjs インターフェースにおけるにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0050 2012-03-27 18:42 2011-02-18 Show GitHub Exploit DB Packet Storm
192693 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0048 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
192694 4.3 警告 MediaWiki - MediaWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0047 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
192695 6.8 警告 Mozilla Foundation - Bugzilla におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0046 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
192696 6.8 警告 レッドハット - IcedTea における信頼できるソースからコードを実行するように見せかけることが出来る脆弱性 CWE-20
不適切な入力確認
CVE-2011-0025 2012-03-27 18:42 2011-02-4 Show GitHub Exploit DB Packet Storm
192697 4.7 警告 Fedora Project
レッドハット
- 389 Directory Server の setup スクリプトにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-0022 2012-03-27 18:42 2011-02-23 Show GitHub Exploit DB Packet Storm
192698 9.3 危険 VideoLAN - VideoLAN VLC Media Player の cdg.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0021 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
192699 7.5 危険 Fedora Project
レッドハット
- 389 Directory Server の slapd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0019 2012-03-27 18:42 2011-02-22 Show GitHub Exploit DB Packet Storm
192700 9 危険 OpenVAS - OpenVAS Manager の email 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0018 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 22, 2024, 8:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1841 6.5 MEDIUM
Network
redhat
infinispan
jboss_data_grid
jboss_enterprise_application_platform
data_grid
infinispan
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of t… NVD-CWE-Other
CVE-2023-3628 2024-09-16 23:15 2023-12-18 Show GitHub Exploit DB Packet Storm
1842 5.9 MEDIUM
Network
gnu
redhat
fedoraproject
glibc
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_aus
enterprise_linux_for_power_little_endian
enterprise_linux_for_power_little_endian_eus
enterprise_linux_for_ib…
A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS… CWE-416
 Use After Free
CVE-2023-4806 2024-09-16 23:15 2023-09-19 Show GitHub Exploit DB Packet Storm
1843 6.5 MEDIUM
Network
gnu
redhat
fedoraproject
netapp
glibc
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_aus
enterprise_linux_for_power_little_endian
enterprise_linux_for_power_little_endian_eus
enterprise_linux_for_ib…
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger… CWE-125
Out-of-bounds Read
CVE-2023-4527 2024-09-16 23:15 2023-09-19 Show GitHub Exploit DB Packet Storm
1844 5.9 MEDIUM
Network
gnu
redhat
fedoraproject
netapp
glibc
enterprise_linux
enterprise_linux_server_tus
enterprise_linux_eus
enterprise_linux_server_aus
enterprise_linux_for_power_little_endian
enterprise_linux_for_power_little_endian…
A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo … CWE-416
 Use After Free
CVE-2023-4813 2024-09-16 23:15 2023-09-13 Show GitHub Exploit DB Packet Storm
1845 2.7 LOW
Network
sap netweaver_application_server_abap Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impa… CWE-862
 Missing Authorization
CVE-2024-41728 2024-09-16 23:14 2024-09-10 Show GitHub Exploit DB Packet Storm
1846 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data Verify that lvts_data is not NULL before using it. CWE-476
 NULL Pointer Dereference
CVE-2024-42144 2024-09-16 23:12 2024-07-30 Show GitHub Exploit DB Packet Storm
1847 8.8 HIGH
Network
themify ultra Deserialization of Untrusted Data vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5. CWE-502
 Deserialization of Untrusted Data
CVE-2023-46147 2024-09-16 23:11 2023-12-20 Show GitHub Exploit DB Packet Storm
1848 2.7 LOW
Network
sap netweaver_application_server_abap SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal impact on confidentiali… CWE-863
 Incorrect Authorization
CVE-2024-44114 2024-09-16 23:09 2024-09-10 Show GitHub Exploit DB Packet Storm
1849 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot Commit 272970be3dab ("Bluetooth: hci_qca: Fix driver sh… NVD-CWE-noinfo
CVE-2024-42137 2024-09-16 23:01 2024-07-30 Show GitHub Exploit DB Packet Storm
1850 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When running syzkaller with the newly reintroduced signe… CWE-190
 Integer Overflow or Wraparound
CVE-2024-42136 2024-09-16 22:54 2024-07-30 Show GitHub Exploit DB Packet Storm