Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 15, 2024, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201261	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

201262	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

201263	2.6	注意	オラクル	-	Oracle Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-01-14 15:01	2010-01-14	Show	GitHub Exploit DB Packet Storm

201264	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer に脆弱性	CWE-94 コード・インジェクション	CVE-2009-3672	2010-01-14 12:08	2009-11-25	Show	GitHub Exploit DB Packet Storm

201265	9.3	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の java.lang パッケージにおける脆弱性	CWE-362 競合状態	CVE-2009-2724	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

201266	10	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の Provider クラスにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-2721	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

201267	5	警告	有限会社シースリー	-	WebCalenderC3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0348	2010-01-12 15:01	2010-01-12	Show	GitHub Exploit DB Packet Storm

201268	4.3	警告	有限会社シースリー	-	WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0349	2010-01-12 15:00	2010-01-12	Show	GitHub Exploit DB Packet Storm

201269	10	危険	サイバートラスト株式会社 XEmacs	-	XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2688	2010-01-12 14:48	2009-08-5	Show	GitHub Exploit DB Packet Storm

201270	6.8	警告	IBM	-	IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2746	2010-01-12 14:48	2009-11-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 10, 2024, 8:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
341	5.4	MEDIUM Adjacent	-	-	An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker to create sessions or send traffic…	-	CVE-2024-39534	2024-10-12 01:15	2024-10-12	Show	GitHub Exploit DB Packet Storm

342	5.5	MEDIUM Local	-	-	An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Juniper Networks Junos OS on SRX Series devices allows a local, low-privileged user …	CWE-200 Information Exposure	CVE-2024-39527	2024-10-12 01:15	2024-10-12	Show	GitHub Exploit DB Packet Storm

343	6.5	MEDIUM Adjacent	-	-	An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series with MPC10/MPC11/LC9600 line cards, EX9200 with EX9200-15C lines cards, MX3…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2024-39526	2024-10-12 01:15	2024-10-12	Show	GitHub Exploit DB Packet Storm

344	5.3	MEDIUM Physics	hidglobal	omnikey_secure_elements_reader_configuration_cards_firmware iclass_se_reader_configuration_cards_firmware	Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys.	CWE-285 Improper Authorization	CVE-2024-23806	2024-10-12 01:15	2024-02-8	Show	GitHub Exploit DB Packet Storm

345	3.3	LOW Local	libtiff	libtiff	An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.	CWE-787 Out-of-bounds Write	CVE-2023-6228	2024-10-12 01:15	2023-12-18	Show	GitHub Exploit DB Packet Storm

346	7.8	HIGH Local	libarchive	libarchive	execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.	CWE-125 Out-of-bounds Read	CVE-2024-48957	2024-10-12 01:12	2024-10-10	Show	GitHub Exploit DB Packet Storm

347	7.8	HIGH Local	libarchive	libarchive	execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.	CWE-125 Out-of-bounds Read	CVE-2024-48958	2024-10-12 01:11	2024-10-10	Show	GitHub Exploit DB Packet Storm

348	5.3	MEDIUM Network	mozilla	firefox thunderbird firefox_esr	By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vuln…	NVD-CWE-noinfo	CVE-2024-9398	2024-10-12 01:08	2024-10-2	Show	GitHub Exploit DB Packet Storm

349	7.5	HIGH Network	mozilla	firefox thunderbird firefox_esr	An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow them to access cross-origin JSON content. This ac…	NVD-CWE-Other	CVE-2024-9394	2024-10-12 01:08	2024-10-2	Show	GitHub Exploit DB Packet Storm

350	6.1	MEDIUM Network	mozilla	firefox thunderbird firefox_esr	A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 1…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2024-9397	2024-10-12 01:07	2024-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed