Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Sept. 24, 2024, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 199671 | 5.8 | 警告 | PostgreSQL.org ターボリナックス サン・マイクロシステムズ |
- | PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2009-4034 | 2010-01-26 11:48 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 199672 | 7.8 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4031 | 2010-01-26 11:47 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 199673 | 7.8 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3613 | 2010-01-26 11:38 | 2009-10-19 | Show | GitHub Exploit DB Packet Storm |
| 199674 | 4.6 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の NFSv4 における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3286 | 2010-01-26 11:38 | 2009-09-22 | Show | GitHub Exploit DB Packet Storm |
| 199675 | 4.9 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性 |
CWE-Other
その他 |
CVE-2009-2908 | 2010-01-26 11:38 | 2009-10-13 | Show | GitHub Exploit DB Packet Storm |
| 199676 | 7.2 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux Kernel における権限昇格の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-2695 | 2010-01-26 11:38 | 2009-08-28 | Show | GitHub Exploit DB Packet Storm |
| 199677 | 9.3 | 危険 | アップル サイバートラスト株式会社 サン・マイクロシステムズ レッドハット |
- | JDK および JRE の Sun Java SE にある Deployment Toolkit プラグインにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3865 | 2010-01-26 11:37 | 2009-11-3 | Show | GitHub Exploit DB Packet Storm |
| 199678 | 4.9 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の tc_fill_tclass 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2009-3228 | 2010-01-26 11:37 | 2009-10-19 | Show | GitHub Exploit DB Packet Storm |
| 199679 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の Indeo32 コーデックの ir32_32.dll におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4313 | 2010-01-25 11:53 | 2009-12-8 | Show | GitHub Exploit DB Packet Storm |
| 199680 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4312 | 2010-01-25 11:52 | 2009-12-8 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Sept. 24, 2024, 12:15 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1491 | 7.5 |
HIGH
Network
loftware
|
spectrum
|
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
|
NVD-CWE-noinfo
|
CVE-2023-37232
|
2024-09-19 00:55 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1492 | 9.8 |
CRITICAL
Network
moxa
|
oncell_g3470a-lte-eu-t_firmware |
oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-us_firmware
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an ext…
|
CWE-134
|
Use of Externally-Controlled Format String
CVE-2024-4641
|
2024-09-19 00:52 |
2024-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1493 | 8.2 |
HIGH
Network
moxa
|
oncell_g3470a-lte-eu-t_firmware |
oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-us_firmware
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allo…
|
CWE-120
|
Classic Buffer Overflow
CVE-2024-4640
|
2024-09-19 00:48 |
2024-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1494 | 8.8 |
HIGH
Network |
inspireui | mstore_api | The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function i… |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2024-8242 | 2024-09-19 00:47 | 2024-09-14 | Show | GitHub Exploit DB Packet Storm |
| 1495 | 8.8 |
HIGH
Network |
moxa |
oncell_g3470a-lte-eu-t_firmware oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-us_firmware |
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended comman… |
CWE-77
Command Injection |
CVE-2024-4639 | 2024-09-19 00:46 | 2024-06-25 | Show | GitHub Exploit DB Packet Storm |
| 1496 | 9.1 |
CRITICAL
Network
siemens
|
simatic_rf360r_firmware | simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-noinfo
|
CVE-2024-37995
|
2024-09-19 00:37 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1497 | 7.1 |
HIGH
Network |
siemens |
simatic_rf360r_firmware simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-Other
|
CVE-2024-37994
|
2024-09-19 00:35 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1498 | 4.8 |
MEDIUM
Network |
classcms | classcms | A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handle… |
CWE-79
Cross-site Scripting |
CVE-2024-8145 | 2024-09-19 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 1499 | 7.5 |
HIGH
Network
siemens
|
simatic_rf360r_firmware | simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-noinfo
|
CVE-2024-37993
|
2024-09-19 00:32 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1500 | 7.5 |
HIGH
Network
siemens
|
simatic_rf360r_firmware | simatic_rf1170r_firmware simatic_rf1140r_firmware simatic_reader_rf685r_fcc_firmware simatic_reader_rf685r_etsi_firmware simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF…
|
NVD-CWE-noinfo
|
CVE-2024-37992
|
2024-09-19 00:31 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|