Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 4, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200751 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
200752 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
200753 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
200754 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 4, 2024, 4:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 7.5 HIGH
Network 		gitlab gitlab A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 b… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2023-0121 2024-10-3 16:15 2023-06-8 Show GitHub Exploit DB Packet Storm
292 4.3 MEDIUM
Network 		gitlab gitlab A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue descr… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2023-0921 2024-10-3 16:15 2023-06-7 Show GitHub Exploit DB Packet Storm
293 6.4 MEDIUM
Local 		- - Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver. New CWE-125
Out-of-bounds Read 		CVE-2024-8159 2024-10-3 15:15 2024-10-3 Show GitHub Exploit DB Packet Storm
294 7.5 HIGH
Network 		- - The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log fu… New CWE-22
Path Traversal 		CVE-2024-8352 2024-10-3 13:15 2024-10-3 Show GitHub Exploit DB Packet Storm
295 - - - Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project fi… New - CVE-2024-47136 2024-10-3 12:15 2024-10-3 Show GitHub Exploit DB Packet Storm
296 - - - Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted p… New - CVE-2024-47135 2024-10-3 12:15 2024-10-3 Show GitHub Exploit DB Packet Storm
297 - - - Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project f… New - CVE-2024-47134 2024-10-3 12:15 2024-10-3 Show GitHub Exploit DB Packet Storm
298 7.8 HIGH
Local 		cisco ios_xr A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device. T… Update CWE-78
OS Command  		CVE-2024-20398 2024-10-3 10:47 2024-09-12 Show GitHub Exploit DB Packet Storm
299 7.2 HIGH
Network 		cisco ios_xr Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacke… Update CWE-78
OS Command  		CVE-2024-20483 2024-10-3 10:44 2024-09-12 Show GitHub Exploit DB Packet Storm
300 5.5 MEDIUM
Local 		cisco ios_xr A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials. This vulnerabilit… Update CWE-522
 Insufficiently Protected Credentials 		CVE-2024-20489 2024-10-3 10:40 2024-09-12 Show GitHub Exploit DB Packet Storm