Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 4, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200751	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

200752	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

200753	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

200754	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 4, 2024, 4:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
31	4.9	MEDIUM Network	elastic	elasticsearch	A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in… Update	CWE-787 Out-of-bounds Write	CVE-2024-37280	2024-10-4 04:37	2024-06-14	Show	GitHub Exploit DB Packet Storm

32	4.6	MEDIUM Physics	motorola	vigilant_fixed_lpr_coms_box_firmware	An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text. Update	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-38280	2024-10-4 04:36	2024-06-14	Show	GitHub Exploit DB Packet Storm

33	-		-	-	Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters. New	-	CVE-2024-41596	2024-10-4 04:35	2024-10-4	Show	GitHub Exploit DB Packet Storm

34	-		-	-	DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations. New	-	CVE-2024-41595	2024-10-4 04:35	2024-10-4	Show	GitHub Exploit DB Packet Storm

35	-		-	-	DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs. New	-	CVE-2024-41592	2024-10-4 04:35	2024-10-4	Show	GitHub Exploit DB Packet Storm

36	-		-	-	DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter. New	-	CVE-2024-41584	2024-10-4 04:35	2024-10-4	Show	GitHub Exploit DB Packet Storm

37	-		-	-	DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name. New	-	CVE-2024-41583	2024-10-4 04:35	2024-10-4	Show	GitHub Exploit DB Packet Storm

38	7.5	HIGH Adjacent	samsung	syncthru_web_service	An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. Update	NVD-CWE-noinfo	CVE-2021-35309	2024-10-4 04:35	2023-08-23	Show	GitHub Exploit DB Packet Storm

39	8.8	HIGH Network	google debian fedoraproject	chrome debian_linux fedora	Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Update	CWE-787 Out-of-bounds Write	CVE-2023-2137	2024-10-4 04:35	2023-04-19	Show	GitHub Exploit DB Packet Storm

40	7.5	HIGH Network	google debian fedoraproject	chrome debian_linux fedora	Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafte… Update	CWE-416 Use After Free	CVE-2023-2135	2024-10-4 04:35	2023-04-19	Show	GitHub Exploit DB Packet Storm