Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 4:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199191 5.5 警告 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3568 2012-01-20 15:17 2012-01-17 Show GitHub Exploit DB Packet Storm
199192 6.4 警告 オラクル - Oracle Fusion Middleware における Search の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0083 2012-01-20 15:09 2012-01-17 Show GitHub Exploit DB Packet Storm
199193 5 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3566 2012-01-20 12:12 2012-01-17 Show GitHub Exploit DB Packet Storm
199194 2.6 注意 オラクル - Oracle WebLogic Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0077 2012-01-20 12:09 2012-01-20 Show GitHub Exploit DB Packet Storm
199195 5 警告 osCommerce - osCommerce におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2005-2330 2012-01-20 12:08 2012-01-20 Show GitHub Exploit DB Packet Storm
199196 4.3 警告 osCommerce - osCommerce 日本語版におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0311 2012-01-20 12:08 2012-01-20 Show GitHub Exploit DB Packet Storm
199197 2.7 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0091 2012-01-20 11:36 2012-01-17 Show GitHub Exploit DB Packet Storm
199198 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0089 2012-01-20 11:35 2012-01-17 Show GitHub Exploit DB Packet Storm
199199 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0076 2012-01-20 11:35 2012-01-17 Show GitHub Exploit DB Packet Storm
199200 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0088 2012-01-20 11:35 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in be_xmit() The be_xmit() returns NETDEV_TX_OK without freeing skb in case of be_xmit_enqueue(… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-50167 2024-11-14 00:29 2024-11-7 Show GitHub Exploit DB Packet Storm
1362 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit Syzbot points out that skb_trim() has a sanity check on… CWE-824
 Access of Uninitialized Pointer 		CVE-2024-49938 2024-11-14 00:25 2024-10-22 Show GitHub Exploit DB Packet Storm
1363 6.1 MEDIUM
Network 		veritas data_insight An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated … CWE-79
Cross-site Scripting 		CVE-2024-47854 2024-11-14 00:25 2024-10-4 Show GitHub Exploit DB Packet Storm
1364 6.5 MEDIUM
Adjacent 		zephyrproject zephyr No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c. CWE-787
 Out-of-bounds Write 		CVE-2024-6444 2024-11-14 00:24 2024-10-4 Show GitHub Exploit DB Packet Storm
1365 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix null-ptr-deref in target_alloc_device() There is a null-ptr-deref issue reported by KASAN: BUG: KASAN: n… CWE-476
 NULL Pointer Dereference 		CVE-2024-50153 2024-11-14 00:23 2024-11-7 Show GitHub Exploit DB Packet Storm
1366 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: PAD: fix crash in exit_round_robin() The kernel occasionally crashes in cpumask_clear_cpu(), which is called within exit_ro… NVD-CWE-noinfo
CVE-2024-49935 2024-11-14 00:21 2024-10-22 Show GitHub Exploit DB Packet Storm
1367 4.6 MEDIUM
Physics 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name It's observed that a crash occurs during hot-remove a memor… NVD-CWE-noinfo
CVE-2024-49934 2024-11-14 00:18 2024-10-22 Show GitHub Exploit DB Packet Storm
1368 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix possible double free in smb2_set_ea() Clang static checker(scan-build) warning? fs/smb/client/smb2ops.c:1304:2: … CWE-415
 Double Free 		CVE-2024-50152 2024-11-14 00:15 2024-11-7 Show GitHub Exploit DB Packet Storm
1369 5.3 MEDIUM
Network 		iowacomputergurus aspnetcore.utilities.cloudstorage ICG.AspNetCore.Utilities.CloudStorage is a collection of cloud storage utilities to assist with the management of files for cloud upload. Users of this library that set a duration for a SAS Uri with … NVD-CWE-noinfo
CVE-2024-50353 2024-11-14 00:15 2024-10-30 Show GitHub Exploit DB Packet Storm
1370 7.5 HIGH
Network 		idurarapp idurar IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is acc… CWE-22
CWE-23
Path Traversal
 Relative Path Traversal 		CVE-2024-47769 2024-11-14 00:12 2024-10-5 Show GitHub Exploit DB Packet Storm