Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 25, 2024, 6:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198011	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

198012	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

198013	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

198014	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

198015	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

198016	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

198017	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

198018	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache httpd の mod_deflate モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1891	2011-11-24 10:54	2009-07-10	Show	GitHub Exploit DB Packet Storm

198019	4.3	警告	IBM	-	IBM Lotus Mobile Connect におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4465	2011-11-22 16:26	2011-11-19	Show	GitHub Exploit DB Packet Storm

198020	5	警告	VMware	-	VMware vCenter Update Manager におけるディレクトリトラバーサル攻撃の脆弱性	CWE-16 環境設定	CVE-2011-4404	2011-11-22 16:25	2011-11-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 25, 2024, 8:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
181	3.3	LOW Local	gnu	tar	A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat fro… Update	CWE-125 CWE-401 Out-of-bounds Read Missing Release of Memory after Effective Lifetime	CVE-2021-20193	2024-10-25 03:15	2021-03-27	Show	GitHub Exploit DB Packet Storm

182	5.0	MEDIUM Network	git-scm	git	GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be explo… Update	CWE-20 Improper Input Validation	CVE-2018-1000021	2024-10-25 02:58	2018-02-10	Show	GitHub Exploit DB Packet Storm

183	7.5	HIGH Network	mfasoft	secure_authentication_server	An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows re… Update	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-46937	2024-10-25 02:35	2024-09-16	Show	GitHub Exploit DB Packet Storm

184	7.5	HIGH Network	opendaylight	authentication\ _authorization_and_accounting	An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue con… Update	NVD-CWE-noinfo	CVE-2024-46943	2024-10-25 02:35	2024-09-16	Show	GitHub Exploit DB Packet Storm

185	-		-	-	No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended … Update	-	CVE-2024-40457	2024-10-25 02:35	2024-09-12	Show	GitHub Exploit DB Packet Storm

186	6.7	MEDIUM Local	crucial	mx500_firmware	Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. Update	CWE-787 Out-of-bounds Write	CVE-2024-42642	2024-10-25 02:35	2024-09-5	Show	GitHub Exploit DB Packet Storm

187	-		-	-	An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot. Update	-	CVE-2023-49721	2024-10-25 02:35	2024-02-15	Show	GitHub Exploit DB Packet Storm

188	8.8	HIGH Network	google	chrome	Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Update	CWE-416 Use After Free	CVE-2023-0929	2024-10-25 02:35	2023-02-23	Show	GitHub Exploit DB Packet Storm

189	9.8	CRITICAL Network	atlassian	jira_service_management jira_data_center jira_server	A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versi… Update	NVD-CWE-noinfo	CVE-2022-0540	2024-10-25 02:35	2022-04-21	Show	GitHub Exploit DB Packet Storm

190	4.3	MEDIUM Physics	systemd_project netapp	systemd cn1610_firmware solidfire_\&_hci_management_node snapprotect	systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This oc… Update	NVD-CWE-noinfo	CVE-2018-20839	2024-10-25 02:34	2019-05-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed