Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 16, 2024, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198991	5.1	警告	Hardened-PHP Project	-	PHP 用 Suhosin におけるスタックベースのバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0807	2012-01-30 15:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

198992	6.5	警告	DuckCorp Projects	-	Bip におけるバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0806	2012-01-30 15:13	2012-01-7	Show	GitHub Exploit DB Packet Storm

198993	9.3	危険	DELL EMC (旧 EMC Corporation)	-	EMC NetWorker のサーバにおけるバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0395	2012-01-30 15:12	2012-01-27	Show	GitHub Exploit DB Packet Storm

198994	5	警告	RSAセキュリティ	-	EMC RSA enVision における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4143	2012-01-30 15:11	2012-01-27	Show	GitHub Exploit DB Packet Storm

198995	5.8	警告	OpenSSL Project	-	32-bit プラットフォーム上の OpenSSL における TLS サーバの秘密鍵を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-4354	2012-01-30 15:10	2012-01-15	Show	GitHub Exploit DB Packet Storm

198996	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin のリダイレクタ機能におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-1941	2012-01-30 15:05	2011-05-22	Show	GitHub Exploit DB Packet Storm

198997	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1940	2012-01-30 15:03	2011-05-22	Show	GitHub Exploit DB Packet Storm

198998	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2377	2012-01-27 16:40	2011-06-21	Show	GitHub Exploit DB Packet Storm

198999	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2373	2012-01-27 16:39	2011-06-21	Show	GitHub Exploit DB Packet Storm

199000	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2371	2012-01-27 16:38	2011-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 16, 2024, 5:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2391	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf/32: Fix Oops on tail call tests test_bpf tail call tests end up as: test_bpf: #0 Tail call leaf jited:1 85 PASS …	CWE-787 Out-of-bounds Write	CVE-2022-48998	2024-11-8 02:08	2024-10-22	Show	GitHub Exploit DB Packet Storm

2392	4.7	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: char: tpm: Protect tpm_pm_suspend with locks Currently tpm transactions are executed unconditionally in tpm_pm_suspend() function…	NVD-CWE-noinfo	CVE-2022-48997	2024-11-8 02:07	2024-10-22	Show	GitHub Exploit DB Packet Storm

2393	8.8	HIGH Network	ithemelandco	woocommerce_report	The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on the settin…	CWE-352 Origin Validation Error	CVE-2024-10711	2024-11-8 02:04	2024-11-5	Show	GitHub Exploit DB Packet Storm

2394	8.1	HIGH Network	wpwebelite	woocommerce_-_social_login	The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.7.7. This is due to insufficient verification on the user being retu…	NVD-CWE-noinfo	CVE-2024-10114	2024-11-8 02:04	2024-11-5	Show	GitHub Exploit DB Packet Storm

2395	5.5	MEDIUM Local	huawei	harmonyos	Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.	NVD-CWE-noinfo	CVE-2024-51512	2024-11-8 02:03	2024-11-5	Show	GitHub Exploit DB Packet Storm

2396	5.5	MEDIUM Local	huawei	harmonyos	Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.	NVD-CWE-noinfo	CVE-2024-51511	2024-11-8 02:03	2024-11-5	Show	GitHub Exploit DB Packet Storm

2397	5.5	MEDIUM Local	huawei	harmonyos emui	Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality.	CWE-787 Out-of-bounds Write	CVE-2024-51510	2024-11-8 02:03	2024-11-5	Show	GitHub Exploit DB Packet Storm

2398	8.8	HIGH Network	seopress	seopress	Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1.	CWE-862 Missing Authorization	CVE-2024-50456	2024-11-8 02:02	2024-10-30	Show	GitHub Exploit DB Packet Storm

2399	8.8	HIGH Network	seopress	seopress	Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1.	CWE-862 Missing Authorization	CVE-2024-50455	2024-11-8 02:01	2024-10-30	Show	GitHub Exploit DB Packet Storm

2400	9.8	CRITICAL Network	odude	crypto_tool	The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.15. This is due a to limited arbitrary method call to 'crypto_connect_ajax_process::log_in' …	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2024-9989	2024-11-8 02:00	2024-10-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed