Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 5, 2024, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197011 7.2 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2005 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
197012 5 警告 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2012 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
197013 9.3 危険 マイクロソフト - Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-1969 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
197014 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1897 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
197015 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1896 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
197016 9.3 危険 マイクロソフト - Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2011-1895 2011-10-21 15:28 2011-10-11 Show GitHub Exploit DB Packet Storm
197017 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1253 2011-10-21 15:27 2011-10-11 Show GitHub Exploit DB Packet Storm
197018 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-2011 2011-10-21 15:26 2011-10-11 Show GitHub Exploit DB Packet Storm
197019 9.3 危険 マイクロソフト - Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2003 2011-10-21 15:25 2011-10-11 Show GitHub Exploit DB Packet Storm
197020 4.7 警告 マイクロソフト - Microsoft Windows の win32k.sys におけるサービス運用妨害 (システムハング) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2002 2011-10-21 15:25 2011-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 5, 2024, 12:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
601 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !… Update NVD-CWE-noinfo
CVE-2024-46862 2024-10-4 00:34 2024-09-27 Show GitHub Exploit DB Packet Storm
602 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !… Update NVD-CWE-noinfo
CVE-2024-46863 2024-10-4 00:32 2024-09-27 Show GitHub Exploit DB Packet Storm
603 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: fix kexec crash due to VP assist page corruption commit 9636be85cc5b ("x86/hyperv: Fix hyperv_pcpu_input_arg handling… Update NVD-CWE-noinfo
CVE-2024-46864 2024-10-4 00:29 2024-09-27 Show GitHub Exploit DB Packet Storm
604 7.8 HIGH
Local
papercut papercut_ng
papercut_mf
An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local lo… Update CWE-59
Link Following
CVE-2024-8404 2024-10-4 00:19 2024-09-26 Show GitHub Exploit DB Packet Storm
605 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Update - CVE-2021-47220 2024-10-4 00:15 2024-05-22 Show GitHub Exploit DB Packet Storm
606 7.5 HIGH
Network
microsoft power_platform_terraform_provider Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitiv… Update CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-47083 2024-10-4 00:11 2024-09-26 Show GitHub Exploit DB Packet Storm
607 9.3 CRITICAL
Adjacent
cisco ios_xe A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication ac… Update CWE-863
 Incorrect Authorization
CVE-2024-20510 2024-10-3 23:52 2024-09-26 Show GitHub Exploit DB Packet Storm
608 6.5 MEDIUM
Network
cisco unified_threat_defense_snort_intrusion_prevention_system_engine A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured sec… Update CWE-787
 Out-of-bounds Write
CVE-2024-20508 2024-10-3 23:43 2024-09-26 Show GitHub Exploit DB Packet Storm
609 7.5 HIGH
Network
nodejs node.js A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the po… Update NVD-CWE-noinfo
CVE-2023-32559 2024-10-3 23:35 2023-08-24 Show GitHub Exploit DB Packet Storm
610 5.5 MEDIUM
Local
axiosys bento4 Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt. Update NVD-CWE-noinfo
CVE-2023-38666 2024-10-3 23:35 2023-08-23 Show GitHub Exploit DB Packet Storm