Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 5, 2024, 4:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202701	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

202702	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

202703	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

202704	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

202705	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

202706	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

202707	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

202708	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

202709	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

202710	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 5, 2024, 4:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
901	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot reported] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/…	CWE-416 Use After Free	CVE-2024-49950	2024-11-2 00:05	2024-10-22	Show	GitHub Exploit DB Packet Storm

902	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has bee…	CWE-415 Double Free	CVE-2024-49882	2024-11-2 00:05	2024-10-22	Show	GitHub Exploit DB Packet Storm

903	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check phantom_stream before it is used dcn32_enable_phantom_stream can return null, so returned value must be ch…	CWE-476 NULL Pointer Dereference	CVE-2024-49897	2024-11-1 23:55	2024-10-22	Show	GitHub Exploit DB Packet Storm

904	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: add missing locking in wedged_fini Any non-wedged queue can have a zero refcount here and can be running concu…	CWE-667 Improper Locking	CVE-2024-49943	2024-11-1 23:54	2024-10-22	Show	GitHub Exploit DB Packet Storm

905	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed,…	CWE-416 Use After Free	CVE-2024-49945	2024-11-1 23:52	2024-10-22	Show	GitHub Exploit DB Packet Storm

906	8.8	HIGH Network	aa-team	wzone	Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.	CWE-862 Missing Authorization	CVE-2024-33547	2024-11-1 23:45	2024-06-9	Show	GitHub Exploit DB Packet Storm

907	6.3	MEDIUM Network	softlabdb	integrate_google_drive	Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3.	CWE-862 Missing Authorization	CVE-2023-52177	2024-11-1 23:44	2024-06-12	Show	GitHub Exploit DB Packet Storm

908	8.8	HIGH Network	8theme	xstore_core	Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.	CWE-862 Missing Authorization	CVE-2024-33555	2024-11-1 23:44	2024-06-9	Show	GitHub Exploit DB Packet Storm

909	5.9	MEDIUM Network	securesystems	connaisseur	A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2023-7279	2024-11-1 23:43	2024-09-3	Show	GitHub Exploit DB Packet Storm

910	7.5	HIGH Network	wcharczuk	go-chart	go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2024-40060	2024-11-1 23:42	2024-07-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed