Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 29, 2024, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200361 5 警告 The Tor Project - Tor におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2011-0490 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
200362 4.3 警告 IBM - IBM Cognos 8 BI の cognos.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0486 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
200363 6.9 警告 Novell - openSUSE の aaa_base パッケージにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0468 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
200364 6.4 警告 Novell - SUSE OBS の API におけるパッケージまたはプロジェクトの書き込みアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0466 2012-03-27 18:42 2011-03-2 Show GitHub Exploit DB Packet Storm
200365 10 危険 Novell - Novell Vibe OnPrem における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0464 2012-03-27 18:42 2011-02-25 Show GitHub Exploit DB Packet Storm
200366 2.1 注意 Linux - Linux kernel の ocfs2_prepare_page_for_write 関数における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0463 2012-03-27 18:42 2011-04-9 Show GitHub Exploit DB Packet Storm
200367 4.3 警告 Novell - SUSE OBS のログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0462 2012-03-27 18:42 2011-03-2 Show GitHub Exploit DB Packet Storm
200368 6.3 警告 Novell - openSUSE の /etc/init.d/boot.localfs における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0461 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
200369 7.5 危険 Ruby on Rails project - Ruby on Rails の actionpack/lib/action_view/template/resolver.rb におけるアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0449 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
200370 7.5 危険 Ruby on Rails project - Ruby on Rails における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0448 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 29, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 - - - Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create. New - CVE-2024-54774 2024-12-28 07:15 2024-12-28 Show GitHub Exploit DB Packet Storm
52 - - - A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component. New - CVE-2024-50714 2024-12-28 07:15 2024-12-28 Show GitHub Exploit DB Packet Storm
53 - - - SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component. New - CVE-2024-50717 2024-12-28 06:15 2024-12-28 Show GitHub Exploit DB Packet Storm
54 - - - SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component. New - CVE-2024-50716 2024-12-28 06:15 2024-12-28 Show GitHub Exploit DB Packet Storm
55 - - - An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.ph… New - CVE-2024-50715 2024-12-28 06:15 2024-12-28 Show GitHub Exploit DB Packet Storm
56 - - - SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. New - CVE-2024-50713 2024-12-28 06:15 2024-12-28 Show GitHub Exploit DB Packet Storm
57 - - - HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function. New CWE-122
Heap-based Buffer Overflow 		CVE-2024-56732 2024-12-28 05:15 2024-12-28 Show GitHub Exploit DB Packet Storm
58 - - - An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinit… New - CVE-2024-54454 2024-12-28 05:15 2024-12-28 Show GitHub Exploit DB Packet Storm
59 - - - An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in the DocServlet servlet allows remote att… New - CVE-2024-54453 2024-12-28 05:15 2024-12-28 Show GitHub Exploit DB Packet Storm
60 - - - An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page allows remote att… New - CVE-2024-54452 2024-12-28 05:15 2024-12-28 Show GitHub Exploit DB Packet Storm