Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 27, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198821 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の CSP の実装におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1944 2012-06-7 15:00 2012-06-5 Show GitHub Exploit DB Packet Storm
198822 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-1943 2012-06-7 14:54 2012-06-5 Show GitHub Exploit DB Packet Storm
198823 7.2 危険 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1942 2012-06-7 14:52 2012-06-5 Show GitHub Exploit DB Packet Storm
198824 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1941 2012-06-7 14:42 2012-06-5 Show GitHub Exploit DB Packet Storm
198825 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1938 2012-06-7 14:25 2012-06-5 Show GitHub Exploit DB Packet Storm
198826 4.3 警告 NewsGator Technologies, Inc. - FeedDemon において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2634 2012-06-7 12:01 2012-06-7 Show GitHub Exploit DB Packet Storm
198827 4.3 警告 Sebastian Heinlein
Canonical
- Ubuntu で使用される Aptdaemon における任意のパッケージをインストールされる脆弱性 CWE-287
不適切な認証
CVE-2012-0944 2012-06-6 16:08 2012-06-4 Show GitHub Exploit DB Packet Storm
198828 6.5 警告 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5093 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
198829 7.5 危険 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5092 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
198830 6.5 警告 Best Practical Solutions - Best Practical Solutions RT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4460 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 28, 2024, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 - - - Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was al… - CVE-2024-12175 2024-12-20 06:15 2024-12-20 Show GitHub Exploit DB Packet Storm
612 - - - Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable … - CVE-2024-11364 2024-12-20 06:15 2024-12-20 Show GitHub Exploit DB Packet Storm
613 - - - A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor cou… - CVE-2024-11157 2024-12-20 06:15 2024-12-20 Show GitHub Exploit DB Packet Storm
614 - - - Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has … - CVE-2024-56145 2024-12-20 06:15 2024-12-19 Show GitHub Exploit DB Packet Storm
615 - - - Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service.  If a watchd… - CVE-2024-7139 2024-12-20 05:15 2024-12-20 Show GitHub Exploit DB Packet Storm
616 - - - An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to … - CVE-2024-7138 2024-12-20 05:15 2024-12-20 Show GitHub Exploit DB Packet Storm
617 - - - The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a … - CVE-2024-7137 2024-12-20 05:15 2024-12-20 Show GitHub Exploit DB Packet Storm
618 - - - Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::LocalStore` which means uploads and backups are stored… CWE-200
Information Exposure
CVE-2024-53991 2024-12-20 05:15 2024-12-20 Show GitHub Exploit DB Packet Storm
619 - - - Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advis… CWE-79
Cross-site Scripting
CVE-2024-52794 2024-12-20 05:15 2024-12-20 Show GitHub Exploit DB Packet Storm
620 - - - Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patc… CWE-200
Information Exposure
CVE-2024-52589 2024-12-20 05:15 2024-12-20 Show GitHub Exploit DB Packet Storm