Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198991	5.1	警告	Hardened-PHP Project	-	PHP 用 Suhosin におけるスタックベースのバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0807	2012-01-30 15:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

198992	6.5	警告	DuckCorp Projects	-	Bip におけるバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0806	2012-01-30 15:13	2012-01-7	Show	GitHub Exploit DB Packet Storm

198993	9.3	危険	DELL EMC (旧 EMC Corporation)	-	EMC NetWorker のサーバにおけるバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0395	2012-01-30 15:12	2012-01-27	Show	GitHub Exploit DB Packet Storm

198994	5	警告	RSAセキュリティ	-	EMC RSA enVision における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4143	2012-01-30 15:11	2012-01-27	Show	GitHub Exploit DB Packet Storm

198995	5.8	警告	OpenSSL Project	-	32-bit プラットフォーム上の OpenSSL における TLS サーバの秘密鍵を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-4354	2012-01-30 15:10	2012-01-15	Show	GitHub Exploit DB Packet Storm

198996	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin のリダイレクタ機能におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-1941	2012-01-30 15:05	2011-05-22	Show	GitHub Exploit DB Packet Storm

198997	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1940	2012-01-30 15:03	2011-05-22	Show	GitHub Exploit DB Packet Storm

198998	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2377	2012-01-27 16:40	2011-06-21	Show	GitHub Exploit DB Packet Storm

198999	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2373	2012-01-27 16:39	2011-06-21	Show	GitHub Exploit DB Packet Storm

199000	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2371	2012-01-27 16:38	2011-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 17, 2024, 5:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
891	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's x… Update	CWE-908 Use of Uninitialized Resource	CVE-2024-38538	2024-11-15 01:15	2024-06-19	Show	GitHub Exploit DB Packet Storm

892	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in ntfs_file_release Update	NVD-CWE-noinfo	CVE-2024-50242	2024-11-15 01:12	2024-11-9	Show	GitHub Exploit DB Packet Storm

893	5.4	MEDIUM Network	sap	netweaver_enterprise_portal	SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick t… Update	CWE-79 Cross-site Scripting	CVE-2024-47594	2024-11-15 01:12	2024-10-8	Show	GitHub Exploit DB Packet Storm

894	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") re… Update	CWE-476 NULL Pointer Dereference	CVE-2024-50240	2024-11-15 00:57	2024-11-9	Show	GitHub Exploit DB Packet Storm

895	5.4	MEDIUM Network	ampache	ampache	Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users send messages to one another… Update	CWE-352 Origin Validation Error	CVE-2024-51489	2024-11-15 00:46	2024-11-12	Show	GitHub Exploit DB Packet Storm

896	9.0	CRITICAL Network	ampache	ampache	Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This sec… Update	CWE-79 Cross-site Scripting	CVE-2024-51490	2024-11-15 00:30	2024-11-12	Show	GitHub Exploit DB Packet Storm

897	7.5	HIGH Network	metabase	metabase	Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and… Update	CWE-22 Path Traversal	CVE-2021-41277	2024-11-15 00:26	2021-11-18	Show	GitHub Exploit DB Packet Storm

898	6.5	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_server_2025 windows_10_1809 windows_server_2019 windows_server_2022 windows_10_21h2 windows_11_22h2 windows_10_22h2 windows_…	NTLM Hash Disclosure Spoofing Vulnerability Update	NVD-CWE-noinfo	CVE-2024-43451	2024-11-15 00:24	2024-11-13	Show	GitHub Exploit DB Packet Storm

899	9.8	CRITICAL Network	codezips	hospital_appointment_system	A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. … Update	CWE-89 SQL Injection	CVE-2024-11057	2024-11-15 00:23	2024-11-11	Show	GitHub Exploit DB Packet Storm

900	7.1	HIGH Local	sap	host_agent	An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentia… Update	NVD-CWE-noinfo	CVE-2024-47595	2024-11-15 00:21	2024-11-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed