Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 1, 2025, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203061	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

203062	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

203063	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

203064	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

203065	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

203066	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

203067	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache httpd の mod_deflate モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1891	2011-11-24 10:54	2009-07-10	Show	GitHub Exploit DB Packet Storm

203068	4.3	警告	IBM	-	IBM Lotus Mobile Connect におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4465	2011-11-22 16:26	2011-11-19	Show	GitHub Exploit DB Packet Storm

203069	5	警告	VMware	-	VMware vCenter Update Manager におけるディレクトリトラバーサル攻撃の脆弱性	CWE-16 環境設定	CVE-2011-4404	2011-11-22 16:25	2011-11-17	Show	GitHub Exploit DB Packet Storm

203070	5	警告	Montala Limited	-	ResourceSpace におけるリソース制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4311	2011-11-22 16:25	2011-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 1, 2025, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2021	-		-	-	Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any …	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2024-55888	2024-12-13 05:15	2024-12-13	Show	GitHub Exploit DB Packet Storm

2022	-		-	-	OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data…	CWE-287 Improper Authentication	CVE-2024-55886	2024-12-13 05:15	2024-12-13	Show	GitHub Exploit DB Packet Storm

2023	-		-	-	beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponent…	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2024-55885	2024-12-13 05:15	2024-12-13	Show	GitHub Exploit DB Packet Storm

2024	-		-	-	SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to exec…	CWE-79 Cross-site Scripting	CVE-2024-55878	2024-12-13 05:15	2024-12-13	Show	GitHub Exploit DB Packet Storm

2025	9.3	CRITICAL Network	-	-	Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.	CWE-502 Deserialization of Untrusted Data	CVE-2024-49147	2024-12-13 04:15	2024-12-13	Show	GitHub Exploit DB Packet Storm

2026	6.5	MEDIUM Network	-	-	Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.	CWE-612 Improper Authorization of Index Containing Sensitive Information	CVE-2024-49071	2024-12-13 04:15	2024-12-13	Show	GitHub Exploit DB Packet Storm

2027	-		-	-	nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.	-	CVE-2024-55565	2024-12-13 04:15	2024-12-9	Show	GitHub Exploit DB Packet Storm

2028	7.8	HIGH Local	adobe	substance_3d_modeler	Substance3D - Modeler versions 1.14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita…	CWE-787 Out-of-bounds Write	CVE-2024-52999	2024-12-13 03:52	2024-12-11	Show	GitHub Exploit DB Packet Storm

2029	7.8	HIGH Local	adobe	substance_3d_modeler	Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…	CWE-787 Out-of-bounds Write	CVE-2024-53000	2024-12-13 03:49	2024-12-11	Show	GitHub Exploit DB Packet Storm

2030	7.8	HIGH Local	adobe	substance_3d_modeler	Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…	CWE-787 Out-of-bounds Write	CVE-2024-53001	2024-12-13 03:35	2024-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed