You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
|
Update Date":Oct. 17, 2024, 6:02 p.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
201511 | 6.8 | 警告 | シスコシステムズ | - | 複数の SSL VPN (Web VPN) 製品においてウェブブラウザのセキュリティが迂回される問題 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-2631 | 2010-01-20 14:15 | 2009-12-1 | Show | GitHub Exploit DB Packet Storm |
201512 | 4.4 | 警告 | DAG レッドハット |
- | dstat における Python module の検索パスに関する権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2009-3894 | 2010-01-20 14:15 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
201513 | 6.4 | 警告 | OSIsoft | - | PI Server の OSIsoft PI System におけるデータベースの情報を変更される脆弱性 |
CWE-310
暗号の問題 |
CVE-2009-0209 | 2010-01-20 14:14 | 2009-10-1 | Show | GitHub Exploit DB Packet Storm |
201514 | 9.3 | 危険 | サン・マイクロシステムズ freedesktop.org レッドハット サイバートラスト株式会社 Glyph & Cog, LLC |
- | Xpdf および Poppler の PSOutputDev::doImageL1Sep 関数における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-3606 | 2010-01-20 11:57 | 2009-10-15 | Show | GitHub Exploit DB Packet Storm |
201515 | 6.5 | 警告 | PostgreSQL.org サイバートラスト株式会社 ターボリナックス サン・マイクロシステムズ レッドハット |
- | PostgreSQL の core server コンポーネントにおける権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3230 | 2010-01-19 15:49 | 2009-09-17 | Show | GitHub Exploit DB Packet Storm |
201516 | 7.5 | 危険 | アップル サイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズ レッドハット |
- | Python における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2008-2315 | 2010-01-19 15:48 | 2008-08-1 | Show | GitHub Exploit DB Packet Storm |
201517 | 7.5 | 危険 | アップル サイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズ レッドハット |
- | Python の zlib 拡張モジュールにおける任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2008-1721 | 2010-01-19 15:48 | 2008-04-10 | Show | GitHub Exploit DB Packet Storm |
201518 | 6.8 | 警告 | アップル サイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズ レッドハット |
- | Python の imageop.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2008-1679 | 2010-01-19 15:48 | 2008-04-22 | Show | GitHub Exploit DB Packet Storm |
201519 | 5.8 | 警告 | アップル サイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズ レッドハット |
- | Python の imageop モジュールにおける複数の整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2007-4965 | 2010-01-19 15:47 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
201520 | 7.5 | 危険 | アップル | - | Mac OS X 用の Java における任意のコードを実行される脆弱性 |
CWE-310
暗号の問題 |
CVE-2009-2843 | 2010-01-18 12:22 | 2009-12-3 | Show | GitHub Exploit DB Packet Storm |
Update Date:Oct. 10, 2024, 8:13 p.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
91 | 6.7 |
MEDIUM
Local |
qualcomm |
wsa8835_firmware wsa8830_firmware wcn3988_firmware wcn3980_firmware wcd9380_firmware sw5100p_firmware sw5100_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware snapdrag… |
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. Update |
CWE-416
Use After Free |
CVE-2024-23376 | 2024-10-17 05:07 | 2024-10-7 | Show | GitHub Exploit DB Packet Storm |
92 | 4.9 |
MEDIUM
Network |
mattermost | mattermost_server | Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams … Update |
NVD-CWE-noinfo
|
CVE-2024-42497 | 2024-10-17 05:05 | 2024-08-23 | Show | GitHub Exploit DB Packet Storm |
93 | 8.8 |
HIGH
Network |
tenda | o6_firmware | A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet of the file /goform/setPortForward. The manipulation of the argument ip/localP… Update |
CWE-787
Out-of-bounds Write |
CVE-2024-8231 | 2024-10-17 05:01 | 2024-08-28 | Show | GitHub Exploit DB Packet Storm |
94 | 7.5 |
HIGH
Network
connect2id
|
nimbus_jose\+jwt
|
In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PB…
Update
|
NVD-CWE-noinfo
|
CVE-2023-52428
|
2024-10-17 05:01 |
2024-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
95 | 6.7 |
MEDIUM
Local |
qualcomm |
srv1m_firmware srv1h_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sa9000p_firmware sa8775p_firmware sa8770p_firmware sa8650p_firmware sa8620p_firmware sa8255p_firmware<… |
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record. Update |
CWE-120
Classic Buffer Overflow |
CVE-2024-23378 | 2024-10-17 05:00 | 2024-10-7 | Show | GitHub Exploit DB Packet Storm |
96 | 6.7 |
MEDIUM
Local |
qualcomm |
wsa8835_firmware wsa8830_firmware wsa8815_firmware wsa8810_firmware wcn3990_firmware wcd9380_firmware wcd9341_firmware wcd9340_firmware wcd9335_firmware srv1m_firmware s… |
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario. Update |
CWE-415
Double Free |
CVE-2024-23379 | 2024-10-17 04:58 | 2024-10-7 | Show | GitHub Exploit DB Packet Storm |
97 | 6.1 |
MEDIUM
Network |
hcltech | sametime_chat_and_meetings | Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks. Update |
CWE-1021
Improper Restriction of Rendered UI Layers or Frames |
CVE-2023-45698 | 2024-10-17 04:58 | 2024-02-10 | Show | GitHub Exploit DB Packet Storm |
98 | 7.5 |
HIGH
Network
qualcomm
|
snapdragon_w5\+_gen_1_wearable_platform_firmware |
wsa8835_firmware wsa8830_firmware wsa8810_firmware wcn3988_firmware wcn3980_firmware wcn3950_firmware wcd9385_firmware wcd9380…
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
Update
|
CWE-125
|
Out-of-bounds Read
CVE-2024-33049
|
2024-10-17 04:57 |
2024-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
99 | 7.5 |
HIGH
Network
phpoffice
|
phpspreadsheet
|
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX fil…
Update
|
CWE-918 |
CWE-36 Server-Side Request Forgery (SSRF) Absolute Path Traversal
CVE-2024-45290
|
2024-10-17 04:54 |
2024-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
100 | 8.2 |
HIGH
Network
qualcomm
|
qca6574au_firmware |
qca6574a_firmware qca6564au_firmware qca6564a_firmware mdm9628_firmware
Information disclosure while parsing the multiple MBSSID IEs from the beacon.
Update
|
CWE-125
|
Out-of-bounds Read
CVE-2024-33064
|
2024-10-17 04:52 |
2024-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|