Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 7, 2024, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 193121 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3128 | 2010-01-5 16:17 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193122 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office および Open XML File Format Converter における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3127 | 2010-01-5 16:16 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193123 | 6.8 | 警告 | アップル サイバートラスト株式会社 サン・マイクロシステムズ ターボリナックス ヒューレット・パッカード OpenSSL Project レッドハット |
- | OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2007-5135 | 2010-01-5 13:31 | 2007-10-12 | Show | GitHub Exploit DB Packet Storm |
| 193124 | 7.8 | 危険 | マイクロソフト | - | Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-1928 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193125 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の kernel における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-2514 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193126 | 6.8 | 警告 | マイクロソフト | - | Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-2513 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193127 | 6.8 | 警告 | マイクロソフト | - | Microsoft Windows の kernel における権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-1127 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193128 | 10 | 危険 | マイクロソフト | - | Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2009-2523 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193129 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-2512 | 2010-01-4 15:23 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 193130 | 10 | 危険 | アップル VMware サン・マイクロシステムズ |
- | Sun Java SE の Provider クラスにおける詳細不明な脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2722 | 2010-01-4 14:56 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 7, 2024, 8 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2031 | 8.8 |
HIGH
Network |
fasterxml debian netapp oracle |
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commo… |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-11112 | 2024-07-3 10:36 | 2020-03-31 | Show | GitHub Exploit DB Packet Storm |
| 2032 | 8.8 |
HIGH
Network |
fasterxml debian netapp oracle |
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm bankin… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, a… |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-11111 | 2024-07-3 10:36 | 2020-03-31 | Show | GitHub Exploit DB Packet Storm |
| 2033 | 8.8 |
HIGH
Network |
fasterxml debian netapp oracle |
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-10969 | 2024-07-3 10:36 | 2020-03-26 | Show | GitHub Exploit DB Packet Storm |
| 2034 | 8.8 |
HIGH
Network |
fasterxml debian netapp oracle |
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy). |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-10968 | 2024-07-3 10:36 | 2020-03-26 | Show | GitHub Exploit DB Packet Storm |
| 2035 | 8.8 |
HIGH
Network |
fasterxml debian netapp oracle |
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). |
NVD-CWE-Other
|
CVE-2020-10673 | 2024-07-3 10:36 | 2020-03-19 | Show | GitHub Exploit DB Packet Storm |
| 2036 | 8.8 |
HIGH
Network |
fasterxml debian netapp oracle |
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka… |
NVD-CWE-Other
|
CVE-2020-10672 | 2024-07-3 10:36 | 2020-03-19 | Show | GitHub Exploit DB Packet Storm |
| 2037 | 10.0 |
CRITICAL
Network
nortekcontrol
|
linear_emerge_essential_firmware |
linear_emerge_elite_firmware
Linear eMerge E3-Series devices allow Command Injections.
|
CWE-78
|
OS Command
CVE-2019-7256
|
2024-07-3 10:36 |
2019-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 2038 | 5.5 |
MEDIUM
Local |
microsoft |
windows_server_2008 windows_7 |
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to furt… |
CWE-200
Information Exposure |
CVE-2019-1228 | 2024-07-3 10:36 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 2039 | 5.5 |
MEDIUM
Local |
microsoft |
windows_10 windows_server_2016 windows_server_2019 |
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to furt… |
CWE-200
Information Exposure |
CVE-2019-1227 | 2024-07-3 10:36 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 2040 | 7.8 |
HIGH
Local |
microsoft |
office_online_server office office_365_proplus sharepoint_server |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specia… |
NVD-CWE-noinfo
|
CVE-2019-1205 | 2024-07-3 10:36 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |