Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Sept. 23, 2024, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199521	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

199522	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

199523	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

199524	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

199525	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

199526	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

199527	4.4	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1337	2010-01-21 11:23	2009-04-22	Show	GitHub Exploit DB Packet Storm

199528	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5300	2010-01-21 11:22	2008-12-1	Show	GitHub Exploit DB Packet Storm

199529	6.8	警告	シスコシステムズ	-	複数の SSL VPN (Web VPN) 製品においてウェブブラウザのセキュリティが迂回される問題	CWE-264 認可・権限・アクセス制御	CVE-2009-2631	2010-01-20 14:15	2009-12-1	Show	GitHub Exploit DB Packet Storm

199530	4.4	警告	DAG レッドハット	-	dstat における Python module の検索パスに関する権限昇格の脆弱性	CWE-Other その他	CVE-2009-3894	2010-01-20 14:15	2009-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Sept. 23, 2024, 12:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2361	7.3	HIGH Local	acronis	snap_deploy	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.	CWE-427 Uncontrolled Search Path Element	CVE-2024-34017	2024-09-13 02:16	2024-08-30	Show	GitHub Exploit DB Packet Storm

2362	-		-	-	An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `aut…	CWE-285 Improper Authorization	CVE-2024-6840	2024-09-13 02:15	2024-09-13	Show	GitHub Exploit DB Packet Storm

2363	8.8	HIGH Network	phpgurukul	job_portal	File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-8463	2024-09-13 02:15	2024-09-5	Show	GitHub Exploit DB Packet Storm

2364	5.5	MEDIUM Local	artifex	mupdf	In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference and application crash) via a crafted svg f…	CWE-476 NULL Pointer Dereference	CVE-2018-19882	2024-09-13 02:15	2018-12-6	Show	GitHub Exploit DB Packet Storm

2365	5.5	MEDIUM Local	artifex debian	mupdf debian_linux	In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-19777	2024-09-13 02:15	2018-11-30	Show	GitHub Exploit DB Packet Storm

2366	5.5	MEDIUM Local	artifex	mupdf	There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.	CWE-125 Out-of-bounds Read	CVE-2018-18662	2024-09-13 02:15	2018-10-26	Show	GitHub Exploit DB Packet Storm

2367	5.5	MEDIUM Local	artifex	mupdf	In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted pdf file. This is caused by a pdf/pdf-dev…	CWE-129 Improper Validation of Array Index	CVE-2018-16648	2024-09-13 02:15	2018-09-7	Show	GitHub Exploit DB Packet Storm

2368	5.5	MEDIUM Local	artifex	mupdf	In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pd…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-16647	2024-09-13 02:15	2018-09-7	Show	GitHub Exploit DB Packet Storm

2369	5.5	MEDIUM Local	artifex debian	mupdf debian_linux	In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-1000036	2024-09-13 02:15	2018-05-24	Show	GitHub Exploit DB Packet Storm

2370	5.5	MEDIUM Local	artifex debian	mupdf debian_linux	In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pd…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-10289	2024-09-13 02:15	2018-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed