Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 10, 2024, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197331 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1999 2011-10-21 15:40 2011-10-11 Show GitHub Exploit DB Packet Storm
197332 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1998 2011-10-21 15:39 2011-10-11 Show GitHub Exploit DB Packet Storm
197333 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1997 2011-10-21 15:39 2011-10-11 Show GitHub Exploit DB Packet Storm
197334 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1996 2011-10-21 15:38 2011-10-11 Show GitHub Exploit DB Packet Storm
197335 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1995 2011-10-21 15:35 2011-10-11 Show GitHub Exploit DB Packet Storm
197336 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1993 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
197337 7.2 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2005 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
197338 5 警告 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2012 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
197339 9.3 危険 マイクロソフト - Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1969 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
197340 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1897 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 10, 2024, 5:55 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 - - - DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrar… New - CVE-2024-46316 2024-10-10 01:15 2024-10-10 Show GitHub Exploit DB Packet Storm
42 - - - FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to… New - CVE-2024-25825 2024-10-10 01:15 2024-10-10 Show GitHub Exploit DB Packet Storm
43 9.8 CRITICAL
Network 		lollms lollms_web_ui A Server-Side Request Forgery (SSRF) vulnerability exists in the 'add_webpage' endpoint of the parisneo/lollms-webui application, affecting the latest version. The vulnerability arises because the ap… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-5482 2024-10-10 01:12 2024-06-7 Show GitHub Exploit DB Packet Storm
44 8.6 HIGH
Network 		gradio_project gradio A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerabili… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-4325 2024-10-10 01:04 2024-06-7 Show GitHub Exploit DB Packet Storm
45 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel used in indirection tables Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing… Update NVD-CWE-noinfo
CVE-2024-46834 2024-10-10 00:57 2024-09-27 Show GitHub Exploit DB Packet Storm
46 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: hns3: void array out of bound when loop tnl_num When query reg inf of SSU, it loops tnl_num times. However, tnl_num comes fr… Update CWE-129
 Improper Validation of Array Index 		CVE-2024-46833 2024-10-10 00:54 2024-09-27 Show GitHub Exploit DB Packet Storm
47 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed This avoids warning: [ 0.118053] BUG: sleeping functi… Update NVD-CWE-noinfo
CVE-2024-46832 2024-10-10 00:51 2024-09-27 Show GitHub Exploit DB Packet Storm
48 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: validate endpoint index for ast udc We should verify the bound of the array to assure that host may not … Update CWE-129
 Improper Validation of Array Index 		CVE-2024-46836 2024-10-10 00:47 2024-09-27 Show GitHub Exploit DB Packet Storm
49 4.8 MEDIUM
Network 		ays-pro popup_box The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when … Update CWE-79
Cross-site Scripting 		CVE-2023-6591 2024-10-10 00:39 2024-02-13 Show GitHub Exploit DB Packet Storm
50 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on group_create We were allowing any users to create a high priority group without any perm… Update NVD-CWE-noinfo
CVE-2024-46837 2024-10-10 00:37 2024-09-27 Show GitHub Exploit DB Packet Storm