Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 20, 2024, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196241	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0623	2011-08-4 09:10	2011-05-12	Show	GitHub Exploit DB Packet Storm

196242	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0622	2011-08-4 09:09	2011-05-12	Show	GitHub Exploit DB Packet Storm

196243	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0621	2011-08-4 09:09	2011-05-12	Show	GitHub Exploit DB Packet Storm

196244	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0620	2011-08-4 09:08	2011-05-12	Show	GitHub Exploit DB Packet Storm

196245	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0619	2011-08-4 09:07	2011-05-12	Show	GitHub Exploit DB Packet Storm

196246	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0618	2011-08-4 09:06	2011-05-12	Show	GitHub Exploit DB Packet Storm

196247	5	警告	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-0579	2011-08-4 09:05	2011-05-12	Show	GitHub Exploit DB Packet Storm

196248	4.9	警告	オラクル	-	Oracle Solaris における Kernel/sockfs の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2290	2011-08-3 10:38	2011-07-19	Show	GitHub Exploit DB Packet Storm

196249	3.6	注意	オラクル	-	Oracle Solaris における LiveUpgrade の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2289	2011-08-3 10:38	2011-07-19	Show	GitHub Exploit DB Packet Storm

196250	10	危険	オラクル	-	Oracle SysFW の Sun Integrated Lights Out Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-2288	2011-08-3 10:37	2011-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 20, 2024, 8:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1951	5.5	MEDIUM Local	ti	fusion_digital_power_designer	An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-41629	2024-09-14 01:02	2024-09-13	Show	GitHub Exploit DB Packet Storm

1952	4.3	MEDIUM Network	mirapolis	lms	An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulnerability by manipulating the ID parameter and increment STEP parameter, leading …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-25270	2024-09-14 01:01	2024-09-13	Show	GitHub Exploit DB Packet Storm

1953	9.8	CRITICAL Network	docker	desktop	A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.	NVD-CWE-noinfo	CVE-2024-8696	2024-09-14 01:01	2024-09-13	Show	GitHub Exploit DB Packet Storm

1954	9.8	CRITICAL Network	docker	desktop	A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.	NVD-CWE-noinfo	CVE-2024-8695	2024-09-14 01:01	2024-09-13	Show	GitHub Exploit DB Packet Storm

1955	7.2	HIGH Network	starkdigital	wp_testimonial_widget	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.…	CWE-89 SQL Injection	CVE-2024-43966	2024-09-14 01:01	2024-08-27	Show	GitHub Exploit DB Packet Storm

1956	6.3	MEDIUM Network	lollms	lollms	A Cross-Site Request Forgery (CSRF) vulnerability exists in the XTTS server of parisneo/lollms version 9.6 due to a lax CORS policy. The vulnerability allows attackers to perform unauthorized actions…	CWE-352 Origin Validation Error	CVE-2024-4499	2024-09-14 01:01	2024-06-24	Show	GitHub Exploit DB Packet Storm

1957	5.3	MEDIUM Adjacent	phoenixcontact	charx_sec-3150_firmware charx_sec-3100_firmware charx_sec-3050_firmware charx_sec-3000_firmware	An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.	CWE-552 Files or Directories Accessible to External Parties	CVE-2024-3913	2024-09-14 00:58	2024-08-13	Show	GitHub Exploit DB Packet Storm

1958	3.3	LOW Local	lollms	lollms	A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerability arises from the use of shell=True in the subprocess.P…	CWE-78 OS Command	CVE-2024-3121	2024-09-14 00:44	2024-06-24	Show	GitHub Exploit DB Packet Storm

1959	-		-	-	Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file. A remote attacker could use this key to gain root privileges.	-	CVE-2023-49224	2024-09-14 00:35	2024-06-8	Show	GitHub Exploit DB Packet Storm

1960	-		-	-	Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extrac…	-	CVE-2023-49223	2024-09-14 00:35	2024-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed