Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 24, 2024, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192941	4.3	警告	DNN	-	DotNetNuke の Install/InstallWizard.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4514	2012-03-27 18:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

192942	4.3	警告	zimplit	-	Zimplit CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4513	2012-03-27 18:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

192943	7.2	危険	Cobbler project	-	Cobbler における詳細不明な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4512	2012-03-27 18:42	2010-04-23	Show	GitHub Exploit DB Packet Storm

192944	10	危険	シックス・アパート株式会社	-	Movable Type における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2010-4511	2012-03-27 18:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

192945	10	危険	シックス・アパート株式会社	-	Movable Type における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2010-4509	2012-03-27 18:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

192946	10	危険	Mozilla Foundation	-	Mozilla Firefox の WebSockets 実装における脆弱性	CWE-noinfo 情報不足	CVE-2010-4508	2012-03-27 18:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

192947	9.3	危険	clear	-	ClearSpot の iSpot における管理者の認証をクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4507	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

192948	6.8	警告	injader	-	Injader の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4505	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

192949	4.3	警告	Intelliants	-	eSyndiCat Directory におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4504	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

192950	7.5	危険	aigaion	-	Aigaion の indexlight.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4503	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 24, 2024, 5:56 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1471	4.4	MEDIUM Local	dell	vostro_5502_firmware vostro_5402_firmware precision_3660_firmware inspiron_5509_firmware inspiron_5502_firmware inspiron_5409_firmware inspiron_5402_firmware inspiron_27_7720_all…	Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of …	CWE-787 Out-of-bounds Write	CVE-2024-28970	2024-09-18 22:04	2024-06-12	Show	GitHub Exploit DB Packet Storm

1472	7.5	HIGH Network	argoproj	argo_cd	Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authenti…	CWE-306 Missing Authentication for Critical Function	CVE-2024-37152	2024-09-18 21:51	2024-06-7	Show	GitHub Exploit DB Packet Storm

1473	4.3	MEDIUM Network	ibm	datacap	IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a h…	CWE-565 Reliance on Cookies without Validation and Integrity Checking	CVE-2024-39734	2024-09-18 21:50	2024-07-14	Show	GitHub Exploit DB Packet Storm

1474	7.5	HIGH Network	gitlab	gitlab	ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of s…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2024-2800	2024-09-18 21:42	2024-08-8	Show	GitHub Exploit DB Packet Storm

1475	7.5	HIGH Network	oneflow	oneflow	An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.	NVD-CWE-noinfo	CVE-2024-36745	2024-09-18 21:42	2024-06-7	Show	GitHub Exploit DB Packet Storm

1476	5.4	MEDIUM Network	gitlab	gitlab	A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When view…	CWE-79 Cross-site Scripting	CVE-2024-4207	2024-09-18 21:41	2024-08-8	Show	GitHub Exploit DB Packet Storm

1477	8.8	HIGH Network	google microsoft	chrome edge_chromium	Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)	CWE-787 Out-of-bounds Write	CVE-2024-7965	2024-09-18 21:40	2024-08-22	Show	GitHub Exploit DB Packet Storm

1478	9.1	CRITICAL Network	mit debian	kerberos_5 debian_linux	In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.	NVD-CWE-Other	CVE-2024-37371	2024-09-18 21:39	2024-06-29	Show	GitHub Exploit DB Packet Storm

1479	6.8	MEDIUM Physics	redhat	enterprise_linux	A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially craft…	CWE-120 Classic Buffer Overflow	CVE-2024-45619	2024-09-18 18:15	2024-09-4	Show	GitHub Exploit DB Packet Storm

1480	5.3	MEDIUM Network	redhat	service_interconnect	A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certa…	CWE-287 Improper Authentication	CVE-2024-6535	2024-09-18 18:15	2024-07-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed