Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 21, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199291	7.8	危険	シスコシステムズ	-	複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0569	2010-03-10 11:22	2010-02-17	Show	GitHub Exploit DB Packet Storm

199292	7.8	危険	シスコシステムズ	-	複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0150	2010-03-10 11:22	2010-02-17	Show	GitHub Exploit DB Packet Storm

199293	7.8	危険	シスコシステムズ	-	複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0149	2010-03-10 11:22	2010-02-17	Show	GitHub Exploit DB Packet Storm

199294	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0162	2010-03-9 11:02	2010-02-17	Show	GitHub Exploit DB Packet Storm

199295	5	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3988	2010-03-9 11:01	2010-02-17	Show	GitHub Exploit DB Packet Storm

199296	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0160	2010-03-9 11:01	2010-02-17	Show	GitHub Exploit DB Packet Storm

199297	2.1	注意	サイバートラスト株式会社 GNOME Project レッドハット	-	NetworkManager の nm-connection-editor における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-4145	2010-03-8 12:28	2009-12-23	Show	GitHub Exploit DB Packet Storm

199298	6.8	警告	サイバートラスト株式会社 GNOME Project レッドハット	-	NetworkManager における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2009-4144	2010-03-8 12:28	2009-12-23	Show	GitHub Exploit DB Packet Storm

199299	5	警告	Squid-cache.org	-	Squid の htcpHandleTstRequest 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0639	2010-03-8 12:28	2010-02-12	Show	GitHub Exploit DB Packet Storm

199300	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3302	2010-03-5 10:33	2010-02-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 21, 2024, 8:15 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
141	-		-	-	Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access. Update	-	CVE-2024-24694	2024-09-21 00:15	2024-04-10	Show	GitHub Exploit DB Packet Storm

142	5.5	MEDIUM Local	zoom	rooms	Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access. Update	NVD-CWE-Other	CVE-2024-24693	2024-09-21 00:15	2024-03-14	Show	GitHub Exploit DB Packet Storm

143	-		-	-	Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via… Update	-	CVE-2024-24691	2024-09-21 00:15	2024-02-14	Show	GitHub Exploit DB Packet Storm

144	-		-	-	Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access. Update	-	CVE-2024-24690	2024-09-21 00:15	2024-02-14	Show	GitHub Exploit DB Packet Storm

145	7.8	HIGH Local	zoom	zoom video_software_development_kit meeting_software_development_kit virtual_desktop_infrastructure	Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of p… Update	NVD-CWE-noinfo	CVE-2023-49647	2024-09-21 00:15	2024-01-13	Show	GitHub Exploit DB Packet Storm

146	6.5	MEDIUM Network	zoom	zoom virtual_desktop_infrastructure meeting_software_development_kit video_software_development_kit	Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access. Update	CWE-287 Improper Authentication	CVE-2023-49646	2024-09-21 00:15	2023-12-14	Show	GitHub Exploit DB Packet Storm

147	6.5	MEDIUM Network	zoom	meetings virtual_desktop_infrastructure zoom	Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access. Update	NVD-CWE-Other	CVE-2023-43588	2024-09-21 00:15	2023-11-15	Show	GitHub Exploit DB Packet Storm

148	7.5	HIGH Network	litellm	litellm	A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/c… Update	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-6587	2024-09-20 23:55	2024-09-14	Show	GitHub Exploit DB Packet Storm

149	9.8	CRITICAL Network	thinkphp	thinkphp	A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Update	CWE-502 Deserialization of Untrusted Data	CVE-2024-44902	2024-09-20 23:55	2024-09-10	Show	GitHub Exploit DB Packet Storm

150	9.1	CRITICAL Network	baxter	connex_health_portal	In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex po… Update	NVD-CWE-noinfo	CVE-2024-6796	2024-09-20 23:53	2024-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed