Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198931 6.8 警告 アップル - Apple Mac OS X の CoreText における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3449 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
198932 6.8 警告 アップル - Apple Mac OS X の CoreMedia におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3448 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
198933 4.3 警告 アップル - Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3447 2012-02-6 16:27 2012-02-2 Show GitHub Exploit DB Packet Storm
198934 7.5 危険 アップル - Apple Mac OS X の Apple Type Services における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3446 2012-02-6 16:26 2012-02-2 Show GitHub Exploit DB Packet Storm
198935 4.3 警告 アップル - Apple Mac OS X の Address Book における CardDAV データを読まれる脆弱性 CWE-310
暗号の問題 		CVE-2011-3444 2012-02-6 16:25 2012-02-2 Show GitHub Exploit DB Packet Storm
198936 9.3 危険 Invensys - Invensys Wonderware InBatch の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3141 2012-02-3 16:59 2011-08-16 Show GitHub Exploit DB Packet Storm
198937 9.3 危険 Invensys - Invensys Wonderware Information Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2962 2012-02-3 16:58 2011-07-29 Show GitHub Exploit DB Packet Storm
198938 9.3 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4052 2012-02-3 16:58 2011-12-5 Show GitHub Exploit DB Packet Storm
198939 10 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2011-4051 2012-02-3 16:57 2011-12-5 Show GitHub Exploit DB Packet Storm
198940 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy Historian におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3320 2012-02-3 16:56 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1251 - - - In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in wi… CWE-303
 Incorrect Implementation of Authentication Algorithm 		CVE-2024-9999 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1252 - - - A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service. - CVE-2024-9843 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1253 - - - Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders. - CVE-2024-9842 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1254 - - - Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files. - CVE-2024-8539 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1255 - - - Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. - CVE-2024-7571 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1256 - - - Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on … CWE-78
OS Command  		CVE-2024-52010 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1257 - - - Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messa… CWE-248
 Uncaught Exception 		CVE-2024-51750 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1258 - - - Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent.… CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2024-51749 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1259 - - - matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member c… - CVE-2024-50336 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1260 7.8 HIGH
Local 		- - Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this… CWE-787
 Out-of-bounds Write 		CVE-2024-49528 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm