Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 18, 2024, 12:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193741	6.5	警告	シックス・アパート株式会社	-	Movable Type における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-0319	2012-02-23 12:04	2012-02-23	Show	GitHub Exploit DB Packet Storm

193742	2.6	注意	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0318	2012-02-23 12:03	2012-02-23	Show	GitHub Exploit DB Packet Storm

193743	4	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0317	2012-02-23 12:03	2012-02-23	Show	GitHub Exploit DB Packet Storm

193744	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1235	2012-02-23 11:47	2012-02-21	Show	GitHub Exploit DB Packet Storm

193745	6.5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1234	2012-02-23 11:46	2012-02-21	Show	GitHub Exploit DB Packet Storm

193746	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0244	2012-02-23 11:41	2012-02-21	Show	GitHub Exploit DB Packet Storm

193747	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0243	2012-02-23 11:40	2012-02-21	Show	GitHub Exploit DB Packet Storm

193748	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2012-0242	2012-02-23 11:37	2012-02-21	Show	GitHub Exploit DB Packet Storm

193749	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0241	2012-02-23 11:36	2012-02-21	Show	GitHub Exploit DB Packet Storm

193750	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の GbScriptAddUp.asp における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2012-0240	2012-02-23 11:33	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 18, 2024, 12:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1971	5.5	MEDIUM Local	microsoft	office_web_apps_server office_online_server sharepoint_server	Microsoft Office Information Disclosure Vulnerability	NVD-CWE-noinfo	CVE-2022-30159	2024-09-11 01:15	2022-06-16	Show	GitHub Exploit DB Packet Storm

1972	6.7	MEDIUM Local	microsoft	service_fabric	Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an atta…	NVD-CWE-noinfo	CVE-2022-30137	2024-09-11 01:15	2022-06-16	Show	GitHub Exploit DB Packet Storm

1973	7.8	HIGH Local	microsoft	azure_automation_state_configuration azure_automation_update_management container_monitoring_solution log_analytics_agent system_center_operations_manager azure_security_center azur…	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	NVD-CWE-noinfo	CVE-2022-29149	2024-09-11 01:15	2022-06-16	Show	GitHub Exploit DB Packet Storm

1974	6.6	MEDIUM Network	microsoft samba	windows_server_2012 windows_server_2016 windows_server_2019 samba	A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit…	CWE-863 Incorrect Authorization	CVE-2020-17049	2024-09-11 01:15	2020-11-11	Show	GitHub Exploit DB Packet Storm

1975	-		-	-	Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook r…	-	CVE-2024-45393	2024-09-11 00:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

1976	-		-	-	An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permiss…	CWE-284 Improper Access Control	CVE-2024-45323	2024-09-11 00:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

1977	-		-	-	Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. …	CWE-285 Improper Authorization	CVE-2024-45044	2024-09-11 00:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

1978	-		-	-	serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.	CWE-79 Cross-site Scripting	CVE-2024-43800	2024-09-11 00:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

1979	-		-	-	Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0…	CWE-79 Cross-site Scripting	CVE-2024-43799	2024-09-11 00:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

1980	-		-	-	Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched i…	CWE-79 Cross-site Scripting	CVE-2024-43796	2024-09-11 00:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed