Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 21, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196501	5	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3833	2011-06-29 10:17	2010-09-10	Show	GitHub Exploit DB Packet Storm

196502	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3790	2011-06-29 10:15	2010-11-16	Show	GitHub Exploit DB Packet Storm

196503	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3682	2011-06-29 10:14	2010-07-9	Show	GitHub Exploit DB Packet Storm

196504	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3677	2011-06-29 10:13	2010-07-9	Show	GitHub Exploit DB Packet Storm

196505	7.5	危険	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	Samba の sid_parse および dom_sid_parse 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3069	2011-06-29 10:11	2010-09-14	Show	GitHub Exploit DB Packet Storm

196506	7.8	危険	アップルオラクル	-	Oracle Solaris の FTB サーバにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2632	2011-06-29 10:10	2011-01-18	Show	GitHub Exploit DB Packet Storm

196507	5	警告	アップル VMware OpenSSL Project IBM ヒューレット・パッカード	-	OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0740	2011-06-29 10:08	2010-03-24	Show	GitHub Exploit DB Packet Storm

196508	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2094	2011-06-28 12:25	2011-06-14	Show	GitHub Exploit DB Packet Storm

196509	5	警告	アドビシステムズ	-	Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2091	2011-06-28 12:23	2011-06-14	Show	GitHub Exploit DB Packet Storm

196510	6.8	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0629	2011-06-28 12:22	2011-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 22, 2024, 5:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2091	-		-	-	An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to leak API secrets.	-	CVE-2024-37397	2024-09-14 01:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

2092	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid possible physmem_info segment corruption When physical memory for the kernel image is allocated it does not cons…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-45014	2024-09-14 01:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

2093	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() For cases where the crtc's connectors_changed was set wit…	CWE-476 NULL Pointer Dereference	CVE-2024-45015	2024-09-14 01:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

2094	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctrl() Commit 4733b65d82bd ("nvme: start keep-alive after admin queue setup") mov…	CWE-416 Use After Free	CVE-2024-45013	2024-09-14 01:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

2095	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: use dma non-coherent allocator Currently, enabling SG_DEBUG in the kernel will cause nouveau to hit a BUG() on …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-45012	2024-09-14 01:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

2096	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARN_ON_ONCE(msk->pm.local_addr_used == 0) …	NVD-CWE-noinfo	CVE-2024-45010	2024-09-14 01:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

2097	8.2	HIGH Local	oracle	vm_virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high p…	NVD-CWE-noinfo	CVE-2023-22099	2024-09-14 01:35	2023-10-18	Show	GitHub Exploit DB Packet Storm

2098	-		sumatrapdfreader	sumatrapdf	Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers t…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1605	2024-09-14 01:35	2009-05-12	Show	GitHub Exploit DB Packet Storm

2099	5.4	MEDIUM Network	perfexcrm	perfex_crm	A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Cont…	CWE-79 Cross-site Scripting	CVE-2024-44851	2024-09-14 01:34	2024-09-12	Show	GitHub Exploit DB Packet Storm

2100	9.8	CRITICAL Network	comfast	cf-xr11_firmware	COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface.	CWE-77 Command Injection	CVE-2024-44466	2024-09-14 01:32	2024-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed