Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198561 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4818 2012-03-14 16:06 2012-02-14 Show GitHub Exploit DB Packet Storm
198562 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4819 2012-03-14 16:05 2012-02-14 Show GitHub Exploit DB Packet Storm
198563 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0195 2012-03-14 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
198564 5 警告 アップル - Apple Safari の WebKit における認証情報をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2012-0647 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
198565 5 警告 アップル - Apple Safari の WebKit におけるユーザを追跡される脆弱性 CWE-200
情報漏えい 		CVE-2012-0640 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
198566 6.4 警告 アップル - Windows 上で稼働する Apple Safari の IDN 機能におけるドメイン名を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0584 2012-03-14 15:34 2012-03-12 Show GitHub Exploit DB Packet Storm
198567 6.4 警告 VMware - VMware vCenter Chargeback Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1472 2012-03-14 15:15 2012-03-8 Show GitHub Exploit DB Packet Storm
198568 5 警告 yaSSL - yaSSL CyaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1558 2012-03-14 11:53 2012-03-12 Show GitHub Exploit DB Packet Storm
198569 7.5 危険 Parallels - Parallels Plesk Panel の admin/plib/api-rpc/Agent.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1557 2012-03-14 11:52 2012-03-12 Show GitHub Exploit DB Packet Storm
198570 4.3 警告 Ruby on Rails project - Ruby on Rails の select helper におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1099 2012-03-14 11:51 2012-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 5:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2371 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in ext4_ext_insert_extent(), if the path is … CWE-416
 Use After Free 		CVE-2024-49883 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2372 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has bee… CWE-415
 Double Free 		CVE-2024-49882 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2373 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big enough, we free it and set *orig_path … CWE-476
 NULL Pointer Dereference 		CVE-2024-49881 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2374 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion [BUG] Syzbot reported a NULL pointer dereference wit… CWE-476
 NULL Pointer Dereference 		CVE-2024-49868 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2375 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at close_ctree(), we have the followi… CWE-416
 Use After Free 		CVE-2024-49867 2024-11-9 01:15 2024-10-22 Show GitHub Exploit DB Packet Storm
2376 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_check_delete(), which checks whether degene… CWE-125
Out-of-bounds Read 		CVE-2024-47757 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm
2377 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infoleak in usbtmc_write, we need to clear the structur… NVD-CWE-noinfo
CVE-2024-47671 2024-11-9 01:15 2024-10-10 Show GitHub Exploit DB Packet Storm
2378 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory reg… CWE-787
 Out-of-bounds Write 		CVE-2024-47670 2024-11-9 01:15 2024-10-10 Show GitHub Exploit DB Packet Storm
2379 7.0 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the ether3_probe function, a timer is initi… CWE-416
 Use After Free 		CVE-2024-47747 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm
2380 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained forma… CWE-22
Path Traversal 		CVE-2024-47742 2024-11-9 01:15 2024-10-21 Show GitHub Exploit DB Packet Storm