Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 3, 2024, 10:02 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195771	7.5	危険	Electric Sheep Fencing	-	pfSense における証明書を作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4197	2012-01-6 15:21	2011-12-20	Show	GitHub Exploit DB Packet Storm

195772	4.3	警告	Splunk	-	Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4778	2012-01-5 16:29	2011-12-12	Show	GitHub Exploit DB Packet Storm

195773	9.3	危険	Splunk	-	Splunk における任意のファイルを読まれる脆弱性	CWE-287 不適切な認証	CVE-2011-4644	2012-01-5 16:28	2012-01-3	Show	GitHub Exploit DB Packet Storm

195774	4	警告	Splunk	-	Splunk におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4643	2012-01-5 16:27	2011-12-12	Show	GitHub Exploit DB Packet Storm

195775	4.6	警告	Splunk	-	Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4642	2012-01-5 16:27	2011-12-12	Show	GitHub Exploit DB Packet Storm

195776	6.8	警告	Mozilla Foundation	-	Bugzilla の attachment.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-3669	2012-01-5 16:26	2011-11-20	Show	GitHub Exploit DB Packet Storm

195777	6.8	警告	Mozilla Foundation	-	Bugzilla の post_bug.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-3668	2012-01-5 16:26	2011-11-20	Show	GitHub Exploit DB Packet Storm

195778	6.8	警告	Mozilla Foundation	-	Bugzilla の User.offer_account_by_email の WebService メソッドにおける脆弱性	CWE-287 不適切な認証	CVE-2011-3667	2012-01-5 16:23	2011-12-17	Show	GitHub Exploit DB Packet Storm

195779	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3657	2012-01-5 16:21	2011-10-27	Show	GitHub Exploit DB Packet Storm

195780	9.3	危険	Steve Baker	-	PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4620	2012-01-5 16:21	2011-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 3, 2024, 5:55 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
491	-		-	-	In dotCMS dashboard, the Tools and Log Files tabs under System ? Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admi… Update	-	CVE-2024-3164	2024-10-1 01:15	2024-04-2	Show	GitHub Exploit DB Packet Storm

492	7.1	HIGH Local	artifex debian	ghostscript debian_linux	A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF fil… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-27792	2024-10-1 01:15	2022-08-20	Show	GitHub Exploit DB Packet Storm

493	6.1	MEDIUM Network	dotcms	dotcms	In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls. An example affected URL is h… Update	CWE-79 Cross-site Scripting	CVE-2023-3042	2024-10-1 01:15	2023-10-18	Show	GitHub Exploit DB Packet Storm

494	5.4	MEDIUM Network	concretecms	concrete_cms	Concrete CMS versions 9 through 9.3.3 and versions below 8.5.19 are vulnerable to stored XSS in the calendar event addition feature because the calendar event name was not sanitized on output. Users … Update	CWE-79 Cross-site Scripting	CVE-2024-7398	2024-10-1 01:12	2024-09-25	Show	GitHub Exploit DB Packet Storm

495	4.8	MEDIUM Network	concretecms	concrete_cms	Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in Image Editor Background Color. A rogue admin could add malicious code to the Thumbnails/Add-Type. The Concrete C… Update	CWE-79 Cross-site Scripting	CVE-2024-8291	2024-10-1 00:59	2024-09-25	Show	GitHub Exploit DB Packet Storm

496	2.7	LOW Network	github	enterprise_server	An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of G… Update	NVD-CWE-noinfo	CVE-2024-8263	2024-10-1 00:57	2024-09-24	Show	GitHub Exploit DB Packet Storm

497	7.5	HIGH Network	ibm	aspera_console	IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerabilit… Update	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2022-43845	2024-10-1 00:53	2024-09-25	Show	GitHub Exploit DB Packet Storm

498	4.9	MEDIUM Network	zyxel	wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px3321-t1_firmware pm7300-t0_firmware pm5100-t0_firmware pm3100-t0_firmware ax7501-b1_firmware vm…	An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated at… Update	NVD-CWE-noinfo	CVE-2024-38268	2024-10-1 00:52	2024-09-24	Show	GitHub Exploit DB Packet Storm

499	4.9	MEDIUM Network	zyxel	wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px3321-t1_firmware pm7300-t0_firmware pm5100-t0_firmware pm3100-t0_firmware ax7501-b1_firmware vm…	An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated a… Update	NVD-CWE-noinfo	CVE-2024-38267	2024-10-1 00:52	2024-09-24	Show	GitHub Exploit DB Packet Storm

500	4.9	MEDIUM Network	zyxel	wx5600-t0_firmware wx3401-b0_firmware wx3100-t0_firmware scr50axe_firmware px3321-t1_firmware pm7300-t0_firmware pm5100-t0_firmware pm3100-t0_firmware ax7501-b1_firmware vm…	An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authentica… Update	NVD-CWE-noinfo	CVE-2024-38269	2024-10-1 00:51	2024-09-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed