Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199051 4.3 警告 Earl Miles - Drupal 用 Panels モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0914 2012-02-2 16:59 2012-01-24 Show GitHub Exploit DB Packet Storm
199052 7.2 危険 Todd C. Miller - Sudo の sudo_debug 関数における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2012-0809 2012-02-2 14:18 2012-02-1 Show GitHub Exploit DB Packet Storm
199053 5 警告 Samba Project - Samba におけるサービス運用妨害 (メモリおよび CPU 資源の消費) の脆弱性 CWE-200
情報漏えい 		CVE-2012-0817 2012-02-1 16:29 2012-01-29 Show GitHub Exploit DB Packet Storm
199054 4.9 警告 KVM - KVM の arch/x86/kvm/i8254.c におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-4622 2012-02-1 16:28 2012-01-27 Show GitHub Exploit DB Packet Storm
199055 7.5 危険 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4608 2012-02-1 16:27 2012-01-18 Show GitHub Exploit DB Packet Storm
199056 5.8 警告 Kay Framework
OpenID
レッドハット		 - OpenID4Java の message/ax/AxMessage.java における AX 情報を変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4314 2012-02-1 16:26 2011-05-5 Show GitHub Exploit DB Packet Storm
199057 9.3 危険 Google - Android におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3874 2012-02-1 16:24 2011-11-9 Show GitHub Exploit DB Packet Storm
199058 7.5 危険 Kerry Thompson
drusus		 - Logsurfer および Logsurfer+ におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3626 2012-02-1 16:24 2012-01-27 Show GitHub Exploit DB Packet Storm
199059 5 警告 The Support Incident Tracker Project - Support Incident Tracker の translate.php における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-5075 2012-02-1 16:20 2011-11-13 Show GitHub Exploit DB Packet Storm
199060 6.8 警告 The Support Incident Tracker Project - Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5074 2012-02-1 16:18 2012-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1111 7.8 HIGH
Local 		adobe substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o… CWE-787
 Out-of-bounds Write 		CVE-2024-49520 2024-11-14 03:51 2024-11-13 Show GitHub Exploit DB Packet Storm
1112 7.8 HIGH
Local 		adobe substance_3d_painter Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o… CWE-787
 Out-of-bounds Write 		CVE-2024-47427 2024-11-14 03:48 2024-11-13 Show GitHub Exploit DB Packet Storm
1113 4.7 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() The following race condition could trigger a NULL pointer… CWE-476
 NULL Pointer Dereference 		CVE-2024-50260 2024-11-14 03:47 2024-11-9 Show GitHub Exploit DB Packet Storm
1114 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use o… CWE-416
 Use After Free 		CVE-2024-49925 2024-11-14 03:47 2024-10-22 Show GitHub Exploit DB Packet Storm
1115 5.3 MEDIUM
Network 		level1 wbr-6012_firmware The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page acces… NVD-CWE-noinfo
CVE-2024-33626 2024-11-14 03:43 2024-10-30 Show GitHub Exploit DB Packet Storm
1116 7.5 HIGH
Network 		level1 wbr-6012_firmware A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a reboot. An attacker can send an HTTP request… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2024-33623 2024-11-14 03:43 2024-10-30 Show GitHub Exploit DB Packet Storm
1117 7.5 HIGH
Network 		opensourcelabs skyscraper SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for t… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-37163 2024-11-14 03:42 2024-06-8 Show GitHub Exploit DB Packet Storm
1118 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() KASAN reported following issue: BUG: KASAN: stack… CWE-125
Out-of-bounds Read 		CVE-2024-50227 2024-11-14 03:39 2024-11-9 Show GitHub Exploit DB Packet Storm
1119 5.3 MEDIUM
Network 		level1 wbr-6012_firmware The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such… NVD-CWE-noinfo
CVE-2024-33603 2024-11-14 03:39 2024-10-30 Show GitHub Exploit DB Packet Storm
1120 5.9 MEDIUM
Network 		level1 wbr-6012_firmware A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via Web and FTP services, exposing it to network sniffing attack… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-32946 2024-11-14 03:39 2024-10-30 Show GitHub Exploit DB Packet Storm