Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 21, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193701	6.8	警告	Google	-	Google Chrome で使用される libpng の pngrutil.c における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3045	2012-03-27 13:53	2012-03-21	Show	GitHub Exploit DB Packet Storm

193702	6.4	警告	日本電気 IBM 富士通サイバートラスト株式会社 NTP Project サン・マイクロシステムズヒューレット・パッカードインターネットイニシアティブオラクルレッドハット	-	NTP におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2009-3563	2012-03-27 11:37	2009-12-9	Show	GitHub Exploit DB Packet Storm

193703	6.8	警告	アップルサイバートラスト株式会社 NTP Project ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	NTP の ntpq における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0159	2012-03-27 11:35	2009-04-14	Show	GitHub Exploit DB Packet Storm

193704	5	警告	アップルサイバートラスト株式会社レッドハットオラクル NTP Project	-	NTP における証明書チェーンの有効性を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0021	2012-03-27 11:01	2009-01-7	Show	GitHub Exploit DB Packet Storm

193705	5	警告	アップルサイバートラスト株式会社 PNG Development Group オラクル VMware レッドハット	-	libpng に含まれる pngrutil.c におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-2249	2012-03-27 10:32	2010-06-26	Show	GitHub Exploit DB Packet Storm

193706	7.5	危険	アップルサイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社レッドハット	-	libpng に脆弱性	CWE-119 バッファエラー	CVE-2010-1205	2012-03-27 10:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

193707	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

193708	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

193709	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

193710	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 21, 2024, 4:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
161	5.3	MEDIUM Physics	rfideas	micard_plus_ci_firmware micard_plus_ble_firmware	The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card read… Update	NVD-CWE-noinfo	CVE-2024-1578	2024-09-20 22:53	2024-09-16	Show	GitHub Exploit DB Packet Storm

162	4.8	MEDIUM Network	oracle netapp	graalvm graalvm_for_jdk java_jre java_jdk oncommand_workflow_automation oncommand_insight bluexp cloud_insights_storage_workload_security_agent	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u4… Update	NVD-CWE-noinfo	CVE-2024-21145	2024-09-20 22:46	2024-07-17	Show	GitHub Exploit DB Packet Storm

163	9.8	CRITICAL Network	gargaj	wuhu	A vulnerability classified as critical has been found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected is an unknown function of the file /slideeditor.php of the component Slid… Update	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-6948	2024-09-20 22:41	2024-07-21	Show	GitHub Exploit DB Packet Storm

164	5.3	MEDIUM Network	gargaj	wuhu	A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?ed… Update	CWE-22 Path Traversal	CVE-2024-6949	2024-09-20 22:39	2024-07-21	Show	GitHub Exploit DB Packet Storm

165	-		-	-	An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the u… New	-	CVE-2024-40125	2024-09-20 22:35	2024-09-20	Show	GitHub Exploit DB Packet Storm

166	-		-	-	Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function. New	-	CVE-2024-33109	2024-09-20 22:35	2024-09-20	Show	GitHub Exploit DB Packet Storm

167	6.1	MEDIUM Network	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible Update	CWE-79 Cross-site Scripting	CVE-2024-46970	2024-09-20 22:23	2024-09-16	Show	GitHub Exploit DB Packet Storm

168	-		-	-	This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacke… New	CWE-359 Exposure of Private Personal Information to an Unauthorized Actor	CVE-2024-47085	2024-09-20 22:15	2024-09-19	Show	GitHub Exploit DB Packet Storm

169	5.0	MEDIUM Network	nozominetworks	cmc guardian	An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with r… Update	CWE-863 Incorrect Authorization	CVE-2024-4465	2024-09-20 22:15	2024-09-12	Show	GitHub Exploit DB Packet Storm

170	6.5	MEDIUM Network	mintplexlabs	anythingllm	mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS) condition. Specifically, the server can … Update	CWE-400 Uncontrolled Resource Consumption	CVE-2024-3153	2024-09-20 22:15	2024-06-7	Show	GitHub Exploit DB Packet Storm