Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201231 6.9 警告 Linux
kernel.org		 - Linux の udev のデフォルト設定における任意のプログラムを実行される脆弱性 CWE-16
環境設定 		CVE-2011-0640 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
201232 6.9 警告 アップル - Apple の Mac OS X における任意のプログラムを実行される脆弱性 CWE-16
環境設定 		CVE-2011-0639 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
201233 6.9 警告 マイクロソフト - Microsoft Windows における任意のプログラムを実行される脆弱性 CWE-16
環境設定 		CVE-2011-0638 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
201234 4.9 警告 IBM - IBM AIX の FC SCSI プロトコルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0637 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
201235 2.1 注意 NVIDIA - NVIDIA CUDA Toolkit の cudaHostAlloc 関数における重要なメモリを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-0636 2012-03-27 18:42 2011-01-22 Show GitHub Exploit DB Packet Storm
201236 6 警告 simploo - Simploo CMS における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0635 2012-03-27 18:42 2011-01-22 Show GitHub Exploit DB Packet Storm
201237 4.3 警告 Gisle Aas - WWW::Mechanize などの製品で使用される LWP の Net::HTTPS モジュールにおけるサーバをなりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0633 2012-03-27 18:42 2011-03-27 Show GitHub Exploit DB Packet Storm
201238 6.8 警告 シマンテック - SEP の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-0551 2012-03-27 18:42 2011-08-10 Show GitHub Exploit DB Packet Storm
201239 4.3 警告 シマンテック - Symantec SEP の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0550 2012-03-27 18:42 2011-08-10 Show GitHub Exploit DB Packet Storm
201240 7.5 危険 シマンテック - Symantec Web Gateway の forget.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0549 2012-03-27 18:42 2011-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracing_cpumask_write If a large count is provided, it will trigger a warning in bitmap_parse_user… Update NVD-CWE-noinfo
CVE-2024-56763 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
212 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: x86/fred: Clear WFE in missing-ENDBRANCH #CPs An indirect branch instruction sets the CPU indirect branch tracker (IBT) into WAIT… Update NVD-CWE-noinfo
CVE-2024-56761 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
213 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfs_cow_block(), and we h… Update CWE-416
 Use After Free 		CVE-2024-56759 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
214 - - - An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulner… New - CVE-2023-24012 2025-01-10 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
215 - - - An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulner… New - CVE-2023-24011 2025-01-10 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
216 - - - An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulner… New - CVE-2023-24010 2025-01-10 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
217 - - - The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used a… New - CVE-2024-12736 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
218 - - - The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used aga… New - CVE-2024-12731 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
219 - - - The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be use… New - CVE-2024-12715 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
220 - - - The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could … New - CVE-2024-12714 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm