Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 2, 2024, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200171	7.5	危険	Haxx アップルサイバートラスト株式会社レッドハット	-	cURL および libcurl における、任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2417	2010-04-13 14:46	2009-08-12	Show	GitHub Exploit DB Packet Storm

200172	6.8	警告	Haxx アップルサイバートラスト株式会社レッドハット	-	curl および libcurl の redirect 実装における任意のコマンドを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0037	2010-04-13 14:45	2009-03-3	Show	GitHub Exploit DB Packet Storm

200173	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1424	2010-04-12 15:32	2010-04-12	Show	GitHub Exploit DB Packet Storm

200174	4.4	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1030	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

200175	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter Config HICP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4462	2010-04-12 12:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

200176	7.5	危険	The PHP Group	-	PHP のセッション拡張子における open_basedir または safe_mode 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1130	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

200177	4.3	警告	Zope Foundation	-	Zope におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1104	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

200178	4	警告	ヒューレット・パッカード	-	HP HP-UX の NFS/ONCplus にあるインストールプロセスにおけるファイルシステムのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0451	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

200179	7.5	危険	GNU Project サイバートラスト株式会社レッドハット	-	GnuTLS の gnutls_x509_crt_get_serial 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0731	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

200180	4.3	警告	シスコシステムズ	-	Cisco Router and Security Device Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0594	2010-04-8 15:03	2010-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 3, 2024, 5:55 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1671	7.5	HIGH Network	frangoteam	fuxa	FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.	NVD-CWE-Other	CVE-2023-31718	2024-09-25 10:35	2023-09-22	Show	GitHub Exploit DB Packet Storm

1672	7.5	HIGH Network	frangoteam	fuxa	FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log	NVD-CWE-Other	CVE-2023-31716	2024-09-25 10:35	2023-09-22	Show	GitHub Exploit DB Packet Storm

1673	6.5	MEDIUM Network	ivanti	endpoint_manager	An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/Osd…	NVD-CWE-noinfo	CVE-2023-38344	2024-09-25 10:35	2023-09-22	Show	GitHub Exploit DB Packet Storm

1674	6.5	MEDIUM Network	earthgarden_waiting_project	earthgarden_waiting	An information leak in Earthgarden_waiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages.	NVD-CWE-noinfo	CVE-2023-39052	2024-09-25 10:35	2023-09-21	Show	GitHub Exploit DB Packet Storm

1675	8.8	HIGH Network	dolibarr	dolibarr_erp\/crm	File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming function…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2023-38887	2024-09-25 10:35	2023-09-20	Show	GitHub Exploit DB Packet Storm

1676	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2143 Reason: This candidate is a reservation duplicate of CVE-2023-2143. Notes: All CVE users should reference CV…	-	CVE-2024-9063	2024-09-25 10:15	2024-09-25	Show	GitHub Exploit DB Packet Storm

1677	-		-	-	A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD tra…	CWE-295 Improper Certificate Validation	CVE-2024-7383	2024-09-25 10:15	2024-08-5	Show	GitHub Exploit DB Packet Storm

1678	-		-	-	A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.	CWE-94 Code Injection	CVE-2024-6655	2024-09-25 10:15	2024-07-17	Show	GitHub Exploit DB Packet Storm

1679	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value betwe…	CWE-131 Incorrect Calculation of Buffer Size	CVE-2024-42259	2024-09-25 10:15	2024-08-15	Show	GitHub Exploit DB Packet Storm

1680	6.7	MEDIUM Local	gnu redhat	nano enterprise_linux	A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the pe…	CWE-59 Link Following	CVE-2024-5742	2024-09-25 10:15	2024-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed