Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 15, 2024, 4:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202441	7.5	危険	アップル	-	Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1840	2010-11-29 15:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

202442	4.4	警告	アップル	-	Apple Mac OS X の Directory Services における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1838	2010-11-29 15:41	2010-11-15	Show	GitHub Exploit DB Packet Storm

202443	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2174	2010-11-29 15:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

202444	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2173	2010-11-29 15:26	2010-06-10	Show	GitHub Exploit DB Packet Storm

202445	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2172	2010-11-29 15:25	2010-06-10	Show	GitHub Exploit DB Packet Storm

202446	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2171	2010-11-29 15:24	2010-06-10	Show	GitHub Exploit DB Packet Storm

202447	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2170	2010-11-29 15:21	2010-06-10	Show	GitHub Exploit DB Packet Storm

202448	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2169	2010-11-29 15:18	2010-06-10	Show	GitHub Exploit DB Packet Storm

202449	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2167	2010-11-29 15:17	2010-06-10	Show	GitHub Exploit DB Packet Storm

202450	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2166	2010-11-29 15:16	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 15, 2024, 4:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1441	-		-	-	Trustee is a set of tools and components for attesting confidential guests and providing secrets to them. The ART (Attestation Results Token) token, generated by AS, could be manipulated by MITM …	CWE-287 Improper Authentication	CVE-2024-51997	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

1442	-		-	-	SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id para…	-	CVE-2024-51211	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

1443	-		-	-	hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_u…	-	CVE-2024-50811	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

1444	-		-	-	hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and ren…	-	CVE-2024-50810	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

1445	5.3	MEDIUM Network	-	-	A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12…	CWE-362 Race Condition	CVE-2024-50313	2024-11-12 22:55	2024-11-12	Show	GitHub Exploit DB Packet Storm

1446	6.8	MEDIUM Network	-	-	A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab of affected devices is vulnerable to stored cross-site scripting (XSS) attacks…	CWE-79 Cross-site Scripting	CVE-2024-36140	2024-11-12 22:55	2024-11-12	Show	GitHub Exploit DB Packet Storm

1447	7.8	HIGH Local	-	-	A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). The affected product contains several root-owned SUID binaries that could allow an authenticated local attacker to esca…	-	CVE-2024-29119	2024-11-12 22:55	2024-11-12	Show	GitHub Exploit DB Packet Storm

1448	9.8	CRITICAL Network	-	-	The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rl_do_ajax' f…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2024-10245	2024-11-12 22:55	2024-11-12	Show	GitHub Exploit DB Packet Storm

1449	7.3	HIGH Local	-	-	A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions < …	CWE-502 Deserialization of Untrusted Data	CVE-2023-32736	2024-11-12 22:55	2024-11-12	Show	GitHub Exploit DB Packet Storm

1450	-		-	-	The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.18 due to insufficient input san…	CWE-79 Cross-site Scripting	CVE-2024-10323	2024-11-12 22:55	2024-11-12	Show	GitHub Exploit DB Packet Storm