Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 3, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196921 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1995 2011-10-21 15:35 2011-10-11 Show GitHub Exploit DB Packet Storm
196922 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1993 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
196923 7.2 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2005 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
196924 5 警告 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2012 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
196925 9.3 危険 マイクロソフト - Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1969 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
196926 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1897 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
196927 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1896 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
196928 9.3 危険 マイクロソフト - Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1895 2011-10-21 15:28 2011-10-11 Show GitHub Exploit DB Packet Storm
196929 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1253 2011-10-21 15:27 2011-10-11 Show GitHub Exploit DB Packet Storm
196930 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2011 2011-10-21 15:26 2011-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 4, 2024, 5:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 5.5 MEDIUM
Local 		synology active_backup_for_business_agent Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential … Update CWE-306
Missing Authentication for Critical Function 		CVE-2023-52949 2024-10-3 00:26 2024-09-26 Show GitHub Exploit DB Packet Storm
392 5.0 MEDIUM
Local 		synology active_backup_for_business_agent Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecifie… Update CWE-311
Missing Encryption of Sensitive Data 		CVE-2023-52948 2024-10-3 00:26 2024-09-26 Show GitHub Exploit DB Packet Storm
393 3.3 LOW
Local 		synology active_backup_for_business_agent Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecifi… Update CWE-306
Missing Authentication for Critical Function 		CVE-2023-52947 2024-10-3 00:26 2024-09-26 Show GitHub Exploit DB Packet Storm
394 - - - DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped (more specifically, (datadump-table-column-queued), (datadump-table-column-in-progress), (data… New CWE-79
CWE-80
Cross-site Scripting
Basic XSS 		CVE-2024-47612 2024-10-3 00:15 2024-10-3 Show GitHub Exploit DB Packet Storm
395 - - - A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges. New - CVE-2024-44193 2024-10-3 00:15 2024-10-3 Show GitHub Exploit DB Packet Storm
396 8.8 HIGH
Network 		freeipa freeipa A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake r… Update CWE-863
 Incorrect Authorization 		CVE-2024-2698 2024-10-3 00:15 2024-06-12 Show GitHub Exploit DB Packet Storm
397 5.5 MEDIUM
Local 		opentext identity_manager_azuread_driver A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all versions before 5.1.4.0 Update CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-22518 2024-10-3 00:10 2024-09-12 Show GitHub Exploit DB Packet Storm
398 7.5 HIGH
Network 		netiq identity_manager_rest_driver Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. This impact version before 1.1.2.0200. Update CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2022-26322 2024-10-3 00:03 2024-09-12 Show GitHub Exploit DB Packet Storm
399 9.8 CRITICAL
Network 		rockwellautomation factorytalk_batch_view CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impers… Update NVD-CWE-noinfo
CVE-2024-45823 2024-10-2 23:49 2024-09-13 Show GitHub Exploit DB Packet Storm
400 8.3 HIGH
Network 		nvidia nvidia_container_toolkit
nvidia_gpu_operator 		NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain acces… Update CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2024-0132 2024-10-2 23:45 2024-09-26 Show GitHub Exploit DB Packet Storm