Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 25, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194791 6.5 警告 Moodle - Moodle のカレンダーの実装における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2363 2012-07-24 16:10 2012-07-21 Show GitHub Exploit DB Packet Storm
194792 3.5 注意 Moodle - Moodle の Web サービスの実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2361 2012-07-24 16:07 2012-07-21 Show GitHub Exploit DB Packet Storm
194793 3.5 注意 Moodle - Moodle の Wiki サブシステムにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2360 2012-07-24 16:05 2012-07-21 Show GitHub Exploit DB Packet Storm
194794 6.5 警告 Moodle - Moodle の admin/roles/override.php における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2359 2012-07-24 16:03 2012-07-21 Show GitHub Exploit DB Packet Storm
194795 5.5 警告 Moodle - Moodle におけるアクティビティの読み取り専用の状態を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2358 2012-07-24 16:00 2012-07-21 Show GitHub Exploit DB Packet Storm
194796 5 警告 Moodle - Moodle の auth/cas/cas_form.html 内 のマルチ認証機能における資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2357 2012-07-24 15:54 2012-07-21 Show GitHub Exploit DB Packet Storm
194797 4 警告 Moodle - Moodle の question-bank 機能における機能制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2356 2012-07-24 15:52 2012-07-21 Show GitHub Exploit DB Packet Storm
194798 4 警告 Moodle - Moodle における question:use* 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2355 2012-07-24 15:51 2012-07-21 Show GitHub Exploit DB Packet Storm
194799 4 警告 Moodle - Moodle における moodle/site:readallmessages 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2354 2012-07-24 15:50 2012-07-21 Show GitHub Exploit DB Packet Storm
194800 4 警告 Moodle - Moodle における非表示フィールドから重要なユーザ情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2353 2012-07-24 15:46 2012-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial Context Setup Failure` message… New - CVE-2023-37005 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
472 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial Context Setup Response` messag… New - CVE-2023-37004 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
473 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Setup Response` message missing … New - CVE-2023-37003 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
474 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Modification Indication` message… New - CVE-2023-37002 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
475 - - - The NextEPC MME <= 1.0.1 (fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may … New - CVE-2023-36998 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
476 - - - In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interacti… New - CVE-2024-49749 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
477 - - - In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privil… New - CVE-2024-49748 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
478 - - - In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privil… New - CVE-2024-49747 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
479 - - - In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. U… New - CVE-2024-49745 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
480 - - - In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of … New - CVE-2024-49744 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm