Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201901 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0566 2011-03-8 12:37 2011-02-8 Show GitHub Exploit DB Packet Storm
201902 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0565 2011-03-8 12:37 2011-02-8 Show GitHub Exploit DB Packet Storm
201903 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0564 2011-03-8 12:36 2011-02-8 Show GitHub Exploit DB Packet Storm
201904 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0563 2011-03-8 12:36 2011-02-8 Show GitHub Exploit DB Packet Storm
201905 6.9 警告 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0562 2011-03-8 12:36 2011-02-8 Show GitHub Exploit DB Packet Storm
201906 6.4 警告 マイクロソフト - 複数の Microsoft 製品の Kerberos 実装における権限昇格の脆弱性 CWE-287
不適切な認証 		CVE-2011-0091 2011-03-7 15:08 2011-02-8 Show GitHub Exploit DB Packet Storm
201907 7.2 危険 マイクロソフト - 複数の Microsoft 製品の Kerberos 実装における権限昇格の脆弱性 CWE-310
暗号の問題 		CVE-2011-0043 2011-03-7 15:05 2011-02-8 Show GitHub Exploit DB Packet Storm
201908 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0090 2011-03-7 15:03 2011-02-8 Show GitHub Exploit DB Packet Storm
201909 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0089 2011-03-7 15:00 2011-02-8 Show GitHub Exploit DB Packet Storm
201910 7.2 危険 マイクロソフト - 複数の Microsoft 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0088 2011-03-7 14:57 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 5:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1351 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to add interface to list twice when SER If SER L2 occurs during the WoWLAN resume flow, the add interface flow… NVD-CWE-noinfo
CVE-2024-49939 2024-11-14 02:04 2024-10-22 Show GitHub Exploit DB Packet Storm
1352 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Set correct chandef when starting CAC When starting CAC in a mode other than AP mode, it return a "WARNING: CPU: … NVD-CWE-noinfo
CVE-2024-49937 2024-11-14 02:02 2024-10-22 Show GitHub Exploit DB Packet Storm
1353 - - - FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerabilit… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-52306 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1354 - - - UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account wi… CWE-616
CWE-692
 Incomplete Denylist to Cross-Site Scripting 		CVE-2024-52305 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1355 - - - DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and take over services. The JWT secret is hardcoded in the code, and the UID and O… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-52295 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1356 - - - Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via tw… CWE-22
Path Traversal 		CVE-2024-52293 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1357 - - - In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10013 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1358 - - - In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10012 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1359 - - - Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of service or set the encryption key for a filesystem CWE-377
 Insecure Temporary File 		CVE-2024-49506 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm
1360 - - - grub2 allowed attackers with access to the grub shell to access files on the encrypted disks. - CVE-2024-49504 2024-11-14 02:01 2024-11-14 Show GitHub Exploit DB Packet Storm