Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 3, 2024, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199321	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

199322	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-1808	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

199323	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるメモリ破壊の脆弱性	CWE-189 数値処理の問題	CVE-2008-1807	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

199324	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1806	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

199325	2.6	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5814	2010-10-19 15:14	2008-12-19	Show	GitHub Exploit DB Packet Storm

199326	9.3	危険	Google	-	Google Chrome の Gears プラグインにおける任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-3932	2010-10-19 15:02	2009-11-5	Show	GitHub Exploit DB Packet Storm

199327	4.3	警告	Google	-	Google Chrome の src/webkit/glue/webframeloaderclient_impl.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3934	2010-10-19 15:02	2009-11-5	Show	GitHub Exploit DB Packet Storm

199328	9.3	危険	Google	-	Google Chrome のブラックリストにおける危険なファイルのダウンロードを強制される脆弱性	CWE-20 不適切な入力確認	CVE-2009-3931	2010-10-19 15:01	2009-11-5	Show	GitHub Exploit DB Packet Storm

199329	7.5	危険	Google	-	Google Chrome における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3456	2010-10-19 15:01	2009-09-29	Show	GitHub Exploit DB Packet Storm

199330	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-7246	2010-10-19 15:01	2008-09-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 3, 2024, 12:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
601	6.5	MEDIUM Network	rubayathasan	infolinks_ad_wrap	The infolinks Ad Wrap WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack	CWE-352 Origin Validation Error	CVE-2024-8044	2024-09-30 23:03	2024-09-17	Show	GitHub Exploit DB Packet Storm

602	9.8	CRITICAL Network	myoffice	my_office_sdk	New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI protocol.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47222	2024-09-30 23:02	2024-09-24	Show	GitHub Exploit DB Packet Storm

603	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove The following warning is seen during bwmon_remove due to re…	NVD-CWE-Other	CVE-2024-43850	2024-09-30 22:57	2024-08-17	Show	GitHub Exploit DB Packet Storm

604	5.9	MEDIUM Network	planetfitness	planet_fitness_workouts	The Planet Fitness Workouts iOS and Android mobile apps prior to version 9.8.12 (released on 2024-07-25) fail to properly validate TLS certificates, allowing an attacker with appropriate network acce…	CWE-295 Improper Certificate Validation	CVE-2024-43201	2024-09-30 22:55	2024-09-24	Show	GitHub Exploit DB Packet Storm

605	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() In rtw89_sta_info_get_iter() 'status->he_gi' is compared to arr…	CWE-129 Improper Validation of Array Index	CVE-2024-43842	2024-09-30 22:55	2024-08-17	Show	GitHub Exploit DB Packet Storm

606	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iio_gts_build_avail_time_table The sorting in iio_gts_build_avail_time_table is not working…	CWE-787 Out-of-bounds Write	CVE-2024-43825	2024-09-30 22:53	2024-08-17	Show	GitHub Exploit DB Packet Storm

607	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't dirty inode for readonly filesystem syzbot reports f2fs bug as below: kernel BUG at fs/f2fs/inode.c:933! RIP:…	NVD-CWE-noinfo	CVE-2024-42297	2024-09-30 22:41	2024-08-17	Show	GitHub Exploit DB Packet Storm

608	6.1	MEDIUM Network	oveleon	cookiebar	Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the website. Prior to versions 1.16.3 and 2.1.3, the `block/locale` e…	CWE-79 Cross-site Scripting	CVE-2024-47069	2024-09-30 22:40	2024-09-24	Show	GitHub Exploit DB Packet Storm

609	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size from 2 bytes to 16 bytes, beca…	CWE-908 Use of Uninitialized Resource	CVE-2024-42272	2024-09-30 22:40	2024-08-17	Show	GitHub Exploit DB Packet Storm

610	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in pick_link" bug. This is caused by an unini…	CWE-59 Link Following	CVE-2024-46744	2024-09-30 22:36	2024-09-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed