Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193501 6.8 警告 Moshe Weitzman - Drupal 用の Organic Groups モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2721 2012-06-29 10:46 2012-06-6 Show GitHub Exploit DB Packet Storm
193502 5 警告 Adam Ross - Drupal 用の Token Authentication モジュールにおける設定以上の権限を持つリクエストを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2720 2012-06-29 10:43 2012-06-6 Show GitHub Exploit DB Packet Storm
193503 5.1 警告 Nextide - Drupal 用の filedepot モジュールにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2719 2012-06-29 10:39 2012-05-30 Show GitHub Exploit DB Packet Storm
193504 4.3 警告 Jason Moore - Drupal 用の Amadou テーマモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2715 2012-06-29 10:37 2012-05-30 Show GitHub Exploit DB Packet Storm
193505 6.8 警告 Isaac Sukin - Drupal 用の BrowserID モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2713 2012-06-29 10:35 2012-05-23 Show GitHub Exploit DB Packet Storm
193506 2.6 注意 Thomas Seidl - Drupal 用の Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2712 2012-06-29 10:29 2012-05-23 Show GitHub Exploit DB Packet Storm
193507 2.1 注意 Nancy Wichmann - Drupal 用 Taxonomy List モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2711 2012-06-29 10:25 2012-05-23 Show GitHub Exploit DB Packet Storm
193508 2.6 注意 John Albin Wilkins - Drupal 用 Zen モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2710 2012-06-29 10:13 2012-05-16 Show GitHub Exploit DB Packet Storm
193509 2.1 注意 Aegir project - Drupal 用 Hostmaster モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2708 2012-06-29 10:11 2012-05-16 Show GitHub Exploit DB Packet Storm
193510 5.8 警告 Aegir project - Drupal 用 Hostmaster モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2707 2012-06-29 10:10 2012-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 - - - There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood:… New - CVE-2024-43663 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
232 - - - The <redacted>.so library, which is used by <redacted>, is vulnerable to a buffer overflow in the code that handles the deletion of certificates. This buffer overflow can be triggered by providing a … New - CVE-2024-43661 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
233 - - - An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by send… New - CVE-2024-40765 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
234 - - - The CGI script <redacted>.sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credential… New - CVE-2024-43660 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
235 - - - After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue… New - CVE-2024-43659 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
236 - - - Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers befo… New - CVE-2024-43657 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
237 - - - A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. New - CVE-2024-12805 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
238 - - - A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. New - CVE-2024-12803 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
239 - - - A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simul… New - CVE-2023-1907 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
240 - - - Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers befo… New - CVE-2024-43656 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm