Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195911 6.4 警告 The PHP Group - PHP の exif.c にある exif_process_IFD_TAG 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4566 2012-05-14 17:26 2011-10-27 Show GitHub Exploit DB Packet Storm
195912 6.3 警告 サイバートラスト株式会社
Ruby-lang.org
レッドハット		 - Ruby の FileUtils.remove_entry_secure メソッドにおける任意のファイルを削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-1004 2012-05-14 17:21 2011-03-2 Show GitHub Exploit DB Packet Storm
195913 5 警告 The PHP Group - PHP の apache_request_headers 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2329 2012-05-14 16:28 2012-05-11 Show GitHub Exploit DB Packet Storm
195914 5 警告 アップル - Apple Safari の WebKit におけるフォームフィールドに入力される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0676 2012-05-14 15:44 2012-05-11 Show GitHub Exploit DB Packet Storm
195915 6.8 警告 アップル
GNU Project		 - gzip の huft_build 関数における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2624 2012-05-14 15:32 2010-01-29 Show GitHub Exploit DB Packet Storm
195916 4.3 警告 アップル - Apple Mac OS X の Time Machine における Time Capsule の資格情報を読み取られる脆弱性 CWE-287
不適切な認証 		CVE-2012-0675 2012-05-14 15:28 2012-05-11 Show GitHub Exploit DB Packet Storm
195917 7.5 危険 アップル - Apple Mac OS X の Security Framework における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0662 2012-05-14 15:27 2012-05-11 Show GitHub Exploit DB Packet Storm
195918 2.6 注意 日本電気
IBM
アップル
サイバートラスト株式会社
SSH コミュニケーションズ・セキュリティ
ヤマハ
サン・マイクロシステムズ
レッドハット
ディアイティ
OpenBSD		 - SSH 通信において一部データが漏えいする可能性 CWE-200
情報漏えい 		CVE-2008-5161 2012-05-14 15:27 2008-11-17 Show GitHub Exploit DB Packet Storm
195919 2.1 注意 アップル - Apple Mac OS X の Quartz Composer におけるスクリーンロックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0657 2012-05-14 15:23 2012-05-11 Show GitHub Exploit DB Packet Storm
195920 6.2 警告 アップル - Apple Mac OS X の LoginUIFramework における任意のアカウントへログインされる脆弱性 CWE-362
競合状態 		CVE-2012-0656 2012-05-14 15:22 2012-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2301 6.1 MEDIUM
Network 		elabftw elabftw eLabFTW is an open source electronic lab notebook for research labs. A vulnerability in versions prior to 5.1.5 allows an attacker to inject arbitrary HTML tags in the pages: "experiments.php" (show … CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2024-47826 2024-11-9 00:41 2024-10-15 Show GitHub Exploit DB Packet Storm
2302 7.5 HIGH
Network 		vercel next.js Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a … CWE-674
 Uncontrolled Recursion 		CVE-2024-47831 2024-11-9 00:39 2024-10-15 Show GitHub Exploit DB Packet Storm
2303 6.1 MEDIUM
Network 		forgerock access_management An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under… CWE-601
Open Redirect 		CVE-2024-25566 2024-11-9 00:38 2024-10-30 Show GitHub Exploit DB Packet Storm
2304 - - - The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to p… - CVE-2024-7982 2024-11-9 00:35 2024-11-8 Show GitHub Exploit DB Packet Storm
2305 5.5 MEDIUM
Local 		gpac gpac GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so. NVD-CWE-noinfo
CVE-2023-37766 2024-11-9 00:35 2023-07-12 Show GitHub Exploit DB Packet Storm
2306 5.5 MEDIUM
Local 		gpac gpac GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so. NVD-CWE-noinfo
CVE-2023-37765 2024-11-9 00:35 2023-07-12 Show GitHub Exploit DB Packet Storm
2307 6.5 MEDIUM
Network 		microsoft azure_functions Improper Access Control in Imagine Cup allows an authorized attacker to elevate privileges over a network. NVD-CWE-noinfo
CVE-2024-38204 2024-11-9 00:34 2024-10-16 Show GitHub Exploit DB Packet Storm
2308 8.6 HIGH
Network 		microsoft power_platform Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector. CWE-862
 Missing Authorization 		CVE-2024-38190 2024-11-9 00:34 2024-10-16 Show GitHub Exploit DB Packet Storm
2309 7.8 HIGH
Local 		nvidia nemo NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to c… CWE-22
Path Traversal 		CVE-2024-0129 2024-11-9 00:33 2024-10-15 Show GitHub Exploit DB Packet Storm
2310 6.1 MEDIUM
Network 		castos seriously_simple_podcasting The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and… CWE-79
Cross-site Scripting 		CVE-2024-9667 2024-11-9 00:27 2024-11-5 Show GitHub Exploit DB Packet Storm