Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194281 9.3 危険 Gracenote - Gracenote CDDB の CDDBControl におけるバッファオーバーフローの脆弱性 - CVE-2007-0443 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
194282 4.6 警告 BEAシステムズ - BEA AquaLogic Enterprise Security における攻撃の検出を回避される脆弱性 - CVE-2007-0434 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194283 6.5 警告 BEAシステムズ - BEA AquaLogic Enterprise Security におけるアカウント無効後にサーバへアクセスされる脆弱性 - CVE-2007-0433 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194284 7.5 危険 BEAシステムズ - BEA AquaLogic Service Bus における認可ポリシーを回避される脆弱性 - CVE-2007-0432 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194285 7.8 危険 AVM - AVM Fritz!Box におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0431 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194286 4.9 警告 アップル - Apple Mac OS X の shared_region_map_file_np 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0430 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194287 5 警告 DivX - DivX Player と配布されている npdivx32.dll の DivXBrowserPlugin におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0429 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194288 6.8 警告 BEAシステムズ - BEA WebLogic Portal における制限を回避される脆弱性 - CVE-2007-0426 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194289 4.4 警告 BEAシステムズ - BEA WebLogic Portal における詳細不明な脆弱性 - CVE-2007-0423 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
194290 6.5 警告 Django Software Foundation - Django の AuthenticationMiddleware の LazyUser クラスにおける他のユーザ権限を取得される脆弱性 - CVE-2007-0405 2012-06-26 15:46 2007-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 - - - A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure pr… New - CVE-2024-9500 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
92 - - - A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration, this vulnerability may lead to local/cluster unauthorized access. New - CVE-2024-51765 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
93 - - - A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configuration, this vulnerability may lead to local/cluster unauthorized access. New - CVE-2024-51764 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
94 - - - FlightPath 7.5 contains a Cross Site Scripting (XSS) vulnerability, which allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript in the web browser of a user … New - CVE-2024-50983 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
95 - - - GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16. New CWE-285
Improper Authorization 		CVE-2024-38370 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
96 - - - A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the file StudentRecordManagementSystem.cpp of t… New CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-11261 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
97 - - - In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to local escalation of privilege allowing u… New - CVE-2017-13314 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
98 - - - In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote deni… New - CVE-2017-13313 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
99 - - - In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of privilege where an app can start an activ… New - CVE-2017-13312 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm
100 - - - In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can star… New - CVE-2017-13311 2024-11-16 07:15 2024-11-16 Show GitHub Exploit DB Packet Storm