Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Oct. 2, 2024, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 195751 | 4.3 | 警告 | gphemsley | - | SASHA の inc/lib/lib.base.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5042 | 2012-01-5 16:11 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 195752 | 4.3 | 警告 | PulseCMS | - | Pulse Pro CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5041 | 2012-01-5 16:10 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 195753 | 4.3 | 警告 | Infoproject | - | Infoproject Biznis Heroj におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5040 | 2012-01-5 14:27 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 195754 | 7.5 | 危険 | Infoproject | - | Infoproject Biznis Heroj における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-5039 | 2012-01-5 14:26 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 195755 | 7.5 | 危険 | hitCode | - | hitCode hitAppoint における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-5038 | 2012-01-5 14:24 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 195756 | 4.4 | 警告 | ConfigServer | - | ConfigServer Security & Firewall におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-5033 | 2012-01-5 14:21 | 2011-12-10 | Show | GitHub Exploit DB Packet Storm |
| 195757 | 4.9 | 警告 | WinMount | - | WinMount の WMDrive.sys におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2011-5032 | 2012-01-5 14:20 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
| 195758 | 7.5 | 危険 | Shilpi Computers Limited. | - | cApexWEB の servlet/capexweb.parentvalidatepassword における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-5031 | 2012-01-5 14:19 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
| 195759 | 3.5 | 注意 | valthebald | - | Drupal 用 Meta tags quick モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5030 | 2012-01-5 14:18 | 2011-12-14 | Show | GitHub Exploit DB Packet Storm |
| 195760 | 4.3 | 警告 | Alexander Palmo | - | Simple PHP Blog におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5029 | 2012-01-5 11:07 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Oct. 2, 2024, 8:12 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 771 | 9.8 |
CRITICAL
Network
zoom
|
virtual_desktop_infrastructure |
zoom
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network acc…
|
CWE-74
|
Injection
CVE-2023-39213
|
2024-09-28 05:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 772 | 7.5 |
HIGH
Network
zoom
|
meeting_software_development_kit |
video_software_development_kit
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
|
NVD-CWE-noinfo
|
CVE-2023-39217
|
2024-09-28 05:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 773 | 9.8 |
CRITICAL
Network
zoom
|
zoom
|
Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
|
NVD-CWE-noinfo
|
CVE-2023-39216
|
2024-09-28 05:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 774 | 5.7 |
MEDIUM
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks. |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2024-7698 | 2024-09-28 04:39 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 775 | 8.8 |
HIGH
Network |
apache | airflow_sqoop_provider | Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via… |
CWE-20
Improper Input Validation |
CVE-2023-27604 | 2024-09-28 04:35 | 2023-08-28 | Show | GitHub Exploit DB Packet Storm |
| 776 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43387 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 777 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43386 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 778 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43385 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 779 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. |
NVD-CWE-noinfo
|
CVE-2024-43388 | 2024-09-28 04:32 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 780 | 7.5 |
HIGH
Network
redhat |
cryptography.io couchbase
ansible_automation_platform |
enterprise_linux update_infrastructure cryptography couchbase_server
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confi…
|
CWE-203
|
Information Exposure Through Discrepancy
CVE-2023-50782
|
2024-09-28 04:15 |
2024-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|