Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 15, 2024, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194461 7.5 危険 Joomla!
Jextensions		 - Joomla! の JExtensions JE Auto (com_jeauto) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4720 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
194462 7.5 危険 fxwebdesign - Joomla! の JRadio (com_jradio) コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4719 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
194463 4.3 警告 lyften - Joomla! 用の Lyftenbloggie コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4718 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
194464 6.5 警告 Novell - Novell GroupWise の IMAP サーバコンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4717 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
194465 4.3 警告 Novell - Novell GroupWise の WebPublisher コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4716 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
194466 5 警告 Novell - Novell GroupWise の WebAccess Agent におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4715 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
194467 10 危険 Novell - Novell GroupWise におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4714 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
194468 10 危険 Novell - Novell GroupWise の gwia.exe における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4713 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
194469 10 危険 Novell - Novell GroupWise の gwia.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4712 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
194470 7.2 危険 kernel.org - Linux-PAM の pam_env モジュールにおける意図しない環境でプログラムを実行される脆弱性 CWE-DesignError
CVE-2010-4708 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 10, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 7.8 HIGH
Local 		openssl openssl Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_… Update NVD-CWE-noinfo
CVE-2023-4807 2024-10-15 00:15 2023-09-8 Show GitHub Exploit DB Packet Storm
42 5.3 MEDIUM
Network 		openssl openssl Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH… Update CWE-834
 Excessive Iteration 		CVE-2023-3817 2024-10-15 00:15 2023-08-1 Show GitHub Exploit DB Packet Storm
43 5.3 MEDIUM
Network 		openssl openssl Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH… Update CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2023-3446 2024-10-15 00:15 2023-07-19 Show GitHub Exploit DB Packet Storm
44 5.3 MEDIUM
Network 		openssl
netapp 		openssl
ontap_select_deploy_administration_utility
management_services_for_element_software_and_netapp_hci 		Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that u… Update CWE-287
Improper Authentication 		CVE-2023-2975 2024-10-15 00:15 2023-07-14 Show GitHub Exploit DB Packet Storm
45 - - - When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox < 131.0.3. New - CVE-2024-9936 2024-10-14 23:15 2024-10-14 Show GitHub Exploit DB Packet Storm
46 - - - When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentBuilder allow for an XXE (XML External Entity) attack. Further information on th… New - CVE-2024-8602 2024-10-14 23:15 2024-10-14 Show GitHub Exploit DB Packet Storm
47 - - - VULNERABILITY DETAILS Rockwell Automation used the latest versions of the CVSS scoring system to assess the following vulnerabilities. The following vulnerabilities were reported to us by Sharon Bri… New - CVE-2024-7847 2024-10-14 23:15 2024-10-14 Show GitHub Exploit DB Packet Storm
48 - - - Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection. New - CVE-2024-48255 2024-10-14 23:15 2024-10-14 Show GitHub Exploit DB Packet Storm
49 - - - Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection. New - CVE-2024-48253 2024-10-14 23:15 2024-10-14 Show GitHub Exploit DB Packet Storm
50 - - - X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript code into the "Name" field when creating a list. New - CVE-2024-48120 2024-10-14 23:15 2024-10-14 Show GitHub Exploit DB Packet Storm