Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 20, 2024, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193571	3.3	注意	GNU Project	-	GNU troff の contrib/eqn2graph/eqn2graph.sh などのスクリプトにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2009-5080	2012-03-27 18:42	2011-06-30	Show	GitHub Exploit DB Packet Storm

193572	3.3	注意	GNU Project	-	GNU troff の gendef.sh などのスクリプトにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2009-5079	2012-03-27 18:42	2011-06-30	Show	GitHub Exploit DB Packet Storm

193573	7.5	危険	creloaded	-	CRE Loaded における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-5077	2012-03-27 18:42	2011-06-8	Show	GitHub Exploit DB Packet Storm

193574	7.5	危険	creloaded	-	CRE Loaded における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-5076	2012-03-27 18:42	2011-06-8	Show	GitHub Exploit DB Packet Storm

193575	4.3	警告	monkeysaudio	-	Monkey's Audio におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5075	2012-03-27 18:42	2011-05-20	Show	GitHub Exploit DB Packet Storm

193576	10	危険	mojolicious	-	Mojolicious の MojoX::Dispatcher::Static の実装における脆弱性	CWE-noinfo 情報不足	CVE-2009-5074	2012-03-27 18:42	2011-05-2	Show	GitHub Exploit DB Packet Storm

193577	4	警告	IBM	-	IBM TDS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5073	2012-03-27 18:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

193578	4	警告	IBM	-	IBM TDS の ldap_explode_dn 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5072	2012-03-27 18:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

193579	10	危険	ヒューレット・パッカード	-	Palm Pre WebOS における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-5071	2012-03-27 18:42	2011-04-19	Show	GitHub Exploit DB Packet Storm

193580	4.3	警告	khalid baheyeldin	-	Drupal 用の Flag Content モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5096	2012-03-27 18:42	2009-10-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 20, 2024, 8:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
111	8.8	HIGH Network	adobe suse opensuse redhat	flash_player linux_enterprise_desktop opensuse enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus	Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and… Update	NVD-CWE-noinfo	CVE-2013-0648	2024-09-20 04:51	2013-02-27	Show	GitHub Exploit DB Packet Storm

112	8.8	HIGH Network	adobe redhat suse opensuse	flash_player enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus linux_enterprise_desktop opensuse	The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly rest… Update	NVD-CWE-noinfo	CVE-2013-0643	2024-09-20 04:48	2013-02-27	Show	GitHub Exploit DB Packet Storm

113	4.3	MEDIUM Network	lunary	lunary	A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view … Update	CWE-306 Missing Authentication for Critical Function	CVE-2024-6582	2024-09-20 04:45	2024-09-14	Show	GitHub Exploit DB Packet Storm

114	-		-	-	Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php. New	-	CVE-2024-46374	2024-09-20 04:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

115	-		-	-	Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. New	-	CVE-2024-46373	2024-09-20 04:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

116	-		-	-	Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pb_adv_handle_tranaction_cont functio… New	-	CVE-2024-40568	2024-09-20 04:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

117	-		-	-	CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack. New	-	CVE-2023-30464	2024-09-20 04:35	2024-09-19	Show	GitHub Exploit DB Packet Storm

118	8.8	HIGH Network	thingsboard	thingsboard	ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute (for content sent… Update	CWE-74 Injection	CVE-2023-45303	2024-09-20 04:35	2023-10-7	Show	GitHub Exploit DB Packet Storm

119	7.5	HIGH Network	nasa	openmct	In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action. Update	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2023-45282	2024-09-20 04:35	2023-10-7	Show	GitHub Exploit DB Packet Storm

120	9.8	CRITICAL Network	presto-changeo	attribute_grid	Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disable_json.php. Update	CWE-89 SQL Injection	CVE-2023-43983	2024-09-20 04:35	2023-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed