Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 2, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195671 9.3 危険 NTRglobal - NTR ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0266 2012-01-17 16:04 2012-01-15 Show GitHub Exploit DB Packet Storm
195672 10 危険 ヒューレット・パッカード - HP StorageWorks P2000 G3 MSA array systems における管理者権限でタスクを実行される脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0697 2012-01-16 15:19 2012-01-13 Show GitHub Exploit DB Packet Storm
195673 4.3 警告 IBM - IBM Cognos TM1 の Executive Viewer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0696 2012-01-16 15:04 2010-11-12 Show GitHub Exploit DB Packet Storm
195674 10 危険 Google
サムスン
日本エイサー		 - Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-0695 2012-01-16 15:04 2012-01-10 Show GitHub Exploit DB Packet Storm
195675 4.9 警告 Adaptive Computing - TORQUE Resource Manager における任意のユーザアカウントを偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4925 2012-01-16 15:03 2012-01-13 Show GitHub Exploit DB Packet Storm
195676 10 危険 ヒューレット・パッカード - HP Diagnostics におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4789 2012-01-16 15:02 2012-01-13 Show GitHub Exploit DB Packet Storm
195677 7.8 危険 ヒューレット・パッカード - HP StorageWorks P2000 G3 MSA array systems における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4788 2012-01-16 15:02 2012-01-13 Show GitHub Exploit DB Packet Storm
195678 9.3 危険 ヒューレット・パッカード - HP Easy Printer Care Software における任意のプログラムをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4787 2012-01-16 15:01 2012-01-11 Show GitHub Exploit DB Packet Storm
195679 9.3 危険 ヒューレット・パッカード - HP Easy Printer Care Software における任意のプログラムをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4786 2012-01-16 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
195680 6.9 警告 マイクロソフト - Microsoft Windows のクライアント/サーバランタイムサブシステムにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0005 2012-01-13 18:22 2012-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 2, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 8.8 HIGH
Network 		- - Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malici… New - CVE-2024-8458 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
682 4.8 MEDIUM
Network 		- - Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject ar… New CWE-79
Cross-site Scripting 		CVE-2024-8457 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
683 9.8 CRITICAL
Network 		- - Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and sy… New CWE-306
Missing Authentication for Critical Function 		CVE-2024-8456 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
684 8.1 HIGH
Network 		- - The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user p… New CWE-261
 Weak Encoding for Password 		CVE-2024-8455 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
685 5.3 MEDIUM
Network 		- - The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote… New CWE-476
CWE-400
 NULL Pointer Dereference
 Uncontrolled Resource Consumption 		CVE-2024-8454 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
686 - - - Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read configuration files … New CWE-328
CWE-759
 Use of Weak Hash
 Use of a One-Way Hash without a Salt 		CVE-2024-8453 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
687 - - - A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to unverified path concatenation in the `serve_js` function in `app.py`, which allow… New CWE-29
 Path Traversal: '\..\filename' 		CVE-2024-6394 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
688 - - - Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may re… New - CVE-2024-42496 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
689 - - - Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the d… New - CVE-2024-41999 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm
690 - - - In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session informatio… New - CVE-2024-45200 2024-09-30 17:15 2024-09-30 Show GitHub Exploit DB Packet Storm