Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Dec. 27, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203061	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

203062	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

203063	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

203064	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

203065	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

203066	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

203067	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache httpd の mod_deflate モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1891	2011-11-24 10:54	2009-07-10	Show	GitHub Exploit DB Packet Storm

203068	4.3	警告	IBM	-	IBM Lotus Mobile Connect におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4465	2011-11-22 16:26	2011-11-19	Show	GitHub Exploit DB Packet Storm

203069	5	警告	VMware	-	VMware vCenter Update Manager におけるディレクトリトラバーサル攻撃の脆弱性	CWE-16 環境設定	CVE-2011-4404	2011-11-22 16:25	2011-11-17	Show	GitHub Exploit DB Packet Storm

203070	5	警告	Montala Limited	-	ResourceSpace におけるリソース制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4311	2011-11-22 16:25	2011-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Dec. 27, 2024, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
371	5.5	MEDIUM Local	apple	watchos tvos visionos iphone_os macos ipados	The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS So…	NVD-CWE-noinfo	CVE-2024-54501	2024-12-20 00:37	2024-12-12	Show	GitHub Exploit DB Packet Storm

372	5.9	MEDIUM Network	apple	macos visionos iphone_os ipados	This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, visionOS 2.2. An attacker in a p…	NVD-CWE-noinfo	CVE-2024-54492	2024-12-20 00:36	2024-12-12	Show	GitHub Exploit DB Packet Storm

373	5.5	MEDIUM Local	apple	macos	This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items.	NVD-CWE-noinfo	CVE-2024-54490	2024-12-20 00:27	2024-12-12	Show	GitHub Exploit DB Packet Storm

374	5.5	MEDIUM Local	apple	macos	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data.	NVD-CWE-noinfo	CVE-2024-54476	2024-12-20 00:26	2024-12-12	Show	GitHub Exploit DB Packet Storm

375	5.5	MEDIUM Local	apple	macos	This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.	CWE-522 Insufficiently Protected Credentials	CVE-2024-54471	2024-12-20 00:25	2024-12-12	Show	GitHub Exploit DB Packet Storm

376	9.8	CRITICAL Network	gstreamer_project	gstreamer	GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to accommodate stream->n_samples + samples_cou…	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2024-47537	2024-12-20 00:20	2024-12-12	Show	GitHub Exploit DB Packet Storm

377	-		-	-	Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS	-	CVE-2024-47093	2024-12-20 00:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

378	8.8	HIGH Network	-	-	A flaw was found in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. A non-privileged user on the cluster can create a MustGather object with a specially craf…	CWE-20 Improper Input Validation	CVE-2024-25131	2024-12-20 00:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

379	-		-	-	A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected is the function shouldAcceptNewConnection of the file com.x1a0he.macOS.Adobe-Dow…	CWE-266 CWE-269 Incorrect Privilege Assignment Improper Privilege Management	CVE-2024-12786	2024-12-20 00:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

380	-		-	-	A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The man…	CWE-89 CWE-74 SQL Injection Injection	CVE-2024-12785	2024-12-20 00:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed