Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 26, 2024, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203171 4.4 警告 Apache Software Foundation - Apache Tomcat における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3376 2011-11-15 15:54 2011-11-8 Show GitHub Exploit DB Packet Storm
203172 5 警告 IBM - IBM DB2 Tools の web-server コンポーネントにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4435 2011-11-15 15:50 2011-06-9 Show GitHub Exploit DB Packet Storm
203173 4.9 警告 IBM - IBM AIX におけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1375 2011-11-15 15:50 2011-11-4 Show GitHub Exploit DB Packet Storm
203174 5 警告 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0470 2011-11-15 11:16 2011-01-12 Show GitHub Exploit DB Packet Storm
203175 10 危険 Google - Google Chrome および Chrome OS の node-iteration 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0471 2011-11-15 11:15 2011-01-12 Show GitHub Exploit DB Packet Storm
203176 9.3 危険 Google - Google Chrome と Chrome OS におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0472 2011-11-15 11:15 2011-01-12 Show GitHub Exploit DB Packet Storm
203177 10 危険 Google - Google Chrome と Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0473 2011-11-15 11:14 2011-01-12 Show GitHub Exploit DB Packet Storm
203178 10 危険 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0474 2011-11-15 11:12 2011-01-12 Show GitHub Exploit DB Packet Storm
203179 10 危険 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0475 2011-11-15 11:12 2011-01-12 Show GitHub Exploit DB Packet Storm
203180 10 危険 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0476 2011-11-15 11:11 2011-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 26, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1341 - - - http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 5.41.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML conte… - CVE-2024-55875 2024-12-14 00:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1342 - - - XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0, on instances where `Extension Repository Application` is installed, any user c… - CVE-2024-55662 2024-12-14 00:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1343 - - - phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machi… CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2024-55889 2024-12-13 23:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1344 - - - Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information discl… CWE-11
CVE-2024-48008 2024-12-13 23:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1345 - - - Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to … - CVE-2024-48007 2024-12-13 23:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1346 - - - Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulner… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-38488 2024-12-13 23:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1347 - - - Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as ro… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-22461 2024-12-13 23:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1348 - - - Improper input handling in the 'Host Header' allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application's standard funct… - CVE-2024-11986 2024-12-13 23:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1349 - - - In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). … - CVE-2024-53143 2024-12-13 23:15 2024-12-7 Show GitHub Exploit DB Packet Storm
1350 6.1 MEDIUM
Network 		- - The MyParcel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.24.1.… CWE-79
Cross-site Scripting 		CVE-2024-9608 2024-12-13 21:15 2024-12-13 Show GitHub Exploit DB Packet Storm