Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 10, 2024, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197341 10 危険 ヒューレット・パッカード - HP Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3159 2011-10-25 16:48 2011-10-18 Show GitHub Exploit DB Packet Storm
197342 10 危険 ヒューレット・パッカード - HP Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3158 2011-10-25 16:42 2011-10-18 Show GitHub Exploit DB Packet Storm
197343 10 危険 ヒューレット・パッカード - HP Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3157 2011-10-25 16:41 2011-10-18 Show GitHub Exploit DB Packet Storm
197344 4.4 警告 アップル - Apple Mac OS X の Application Firewall のデバッグログ機能における権限を取得される脆弱性 CWE-134
書式文字列の問題 		CVE-2011-0185 2011-10-25 16:40 2011-10-14 Show GitHub Exploit DB Packet Storm
197345 5 警告 アップル - Apple iOS および Apple TV のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3259 2011-10-25 16:38 2011-10-14 Show GitHub Exploit DB Packet Storm
197346 5 警告 アップル - Apple iOS および Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3246 2011-10-25 16:37 2011-10-14 Show GitHub Exploit DB Packet Storm
197347 5 警告 アップル - Mac OS X 上で稼動する Apple Safari のプライベートブラウズ機能におけるユーザを追跡可能な脆弱性 CWE-200
情報漏えい 		CVE-2011-3242 2011-10-25 16:36 2011-10-14 Show GitHub Exploit DB Packet Storm
197348 6.8 警告 アップル - Mac OS X 上で動作する Apple Safari の SSL 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3231 2011-10-25 16:36 2011-10-14 Show GitHub Exploit DB Packet Storm
197349 6.8 警告 アップル - Mac OS X 上で動作する Apple Safari における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3230 2011-10-25 16:35 2011-10-14 Show GitHub Exploit DB Packet Storm
197350 6.8 警告 アップル - Apple Safari におけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-94
CVE-2011-3229 2011-10-25 16:34 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 10, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - Mware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the operati… New - CVE-2024-38817 2024-10-10 05:15 2024-10-10 Show GitHub Exploit DB Packet Storm
62 - - - VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading to sensitive infor… New - CVE-2024-38815 2024-10-10 05:15 2024-10-10 Show GitHub Exploit DB Packet Storm
63 - - - HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request d… New - CVE-2024-30118 2024-10-10 05:15 2024-10-10 Show GitHub Exploit DB Packet Storm
64 - - - Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte … Update - CVE-2024-24564 2024-10-10 05:15 2024-02-27 Show GitHub Exploit DB Packet Storm
65 9.8 CRITICAL
Network 		vyperlang vyper Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The `concat` built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existin… Update CWE-787
 Out-of-bounds Write 		CVE-2024-22419 2024-10-10 05:15 2024-01-19 Show GitHub Exploit DB Packet Storm
66 7.5 HIGH
Network 		google android In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is n… Update CWE-295
Improper Certificate Validation  		CVE-2023-21265 2024-10-10 04:35 2023-08-15 Show GitHub Exploit DB Packet Storm
67 6.8 MEDIUM
Physics 		google android In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with phy… Update CWE-862
 Missing Authorization 		CVE-2023-21140 2024-10-10 04:35 2023-08-15 Show GitHub Exploit DB Packet Storm
68 6.8 MEDIUM
Physics 		google android In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with phy… Update CWE-862
 Missing Authorization 		CVE-2023-21134 2024-10-10 04:35 2023-08-15 Show GitHub Exploit DB Packet Storm
69 7.5 HIGH
Network 		atlassian jira
jira_software_data_center
jira_server 		Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References (IDOR) vulnerability in t… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-41306 2024-10-10 04:35 2021-10-26 Show GitHub Exploit DB Packet Storm
70 - - - An information disclosure vulnerability exists in open-webui version 0.3.8. The vulnerability is related to the embedding model update feature under admin settings. When a user updates the model path… New CWE-200
Information Exposure 		CVE-2024-7038 2024-10-10 04:15 2024-10-10 Show GitHub Exploit DB Packet Storm