Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 20, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192871 4.3 警告 Endian - Endian Firewall の vpnum/userslist.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0494 2012-06-26 15:55 2008-01-30 Show GitHub Exploit DB Packet Storm
192872 5 警告 csphere - Clansphere の install.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0489 2012-06-26 15:55 2008-01-30 Show GitHub Exploit DB Packet Storm
192873 9.3 危険 Comodo
マイクロソフト		 - Comodo AntiVirus の特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2008-0470 2012-06-26 15:55 2008-01-29 Show GitHub Exploit DB Packet Storm
192874 7.5 危険 flinx - Flinx の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0468 2012-06-26 15:55 2008-01-29 Show GitHub Exploit DB Packet Storm
192875 10 危険 Firebird Project - Firebird におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0467 2012-06-26 15:55 2008-01-28 Show GitHub Exploit DB Packet Storm
192876 5 警告 absofort - absofort aconon Mail 2007 Enterprise SQL の archiv.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0464 2012-06-26 15:55 2008-01-25 Show GitHub Exploit DB Packet Storm
192877 6.8 警告 francisco burzi - PHP-Nuke の Search モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0461 2012-06-26 15:55 2008-01-25 Show GitHub Exploit DB Packet Storm
192878 6.8 警告 easysitenetwork - Easysitenetwork Recipe の list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0453 2012-06-26 15:55 2008-01-24 Show GitHub Exploit DB Packet Storm
192879 7.5 危険 blogcms - BLOG:CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0450 2012-06-26 15:55 2008-01-24 Show GitHub Exploit DB Packet Storm
192880 7.5 危険 cybergl dev team - phpSearch の utils/class_HTTPRetriever.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0448 2012-06-26 15:55 2008-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 20, 2024, 4:18 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2871 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun Smatch reports that copying media_name and if_name to name_parts may overwrite the dest… NVD-CWE-noinfo
CVE-2024-49995 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2872 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there is any sort of clock controller attached… CWE-667
 Improper Locking 		CVE-2024-49985 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2873 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 ("aoe: fix the potential use-… CWE-416
 Use After Free 		CVE-2024-49982 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2874 7.0 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_remove due to race condition in venus_probe, core->work is bound with venus_sys_err… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2024-49981 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2875 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the end, … CWE-416
 Use After Free 		CVE-2024-49966 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2876 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm: omapdrm: Add missing check for alloc_ordered_workqueue As it may return NULL pointer and cause NULL pointer dereference. Add… CWE-476
 NULL Pointer Dereference 		CVE-2024-49879 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2877 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate When doing cleanup, if flags without OCFS2_BH_READAHEAD, it may t… CWE-476
 NULL Pointer Dereference 		CVE-2024-49877 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2878 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is retur… CWE-843
Type Confusion 		CVE-2024-49860 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm
2879 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. How… CWE-459
 Incomplete Cleanup 		CVE-2024-49851 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm
2880 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potential… CWE-476
 NULL Pointer Dereference 		CVE-2024-47756 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm