Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 27, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203171 7.5 危険 Google - Google Chrome のフレームローダ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1292 2011-11-17 10:51 2011-03-24 Show GitHub Exploit DB Packet Storm
203172 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1291 2011-11-17 10:51 2011-03-24 Show GitHub Exploit DB Packet Storm
203173 5 警告 Google - Google Chrome の SPDY 実装におけるサービス運用妨害 (アプリケーションの終了) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1465 2011-11-17 10:50 2011-03-17 Show GitHub Exploit DB Packet Storm
203174 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0080 2011-11-17 10:49 2011-04-28 Show GitHub Exploit DB Packet Storm
203175 5 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-1413 2011-11-17 10:49 2011-03-8 Show GitHub Exploit DB Packet Storm
203176 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1286 2011-11-17 10:48 2011-03-8 Show GitHub Exploit DB Packet Storm
203177 7.5 危険 Google - Google Chrome の正規表現機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1285 2011-11-17 10:47 2011-03-8 Show GitHub Exploit DB Packet Storm
203178 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0081 2011-11-17 10:45 2011-04-28 Show GitHub Exploit DB Packet Storm
203179 7.5 危険 Google - Google Chrome で使用される WebKit の context 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1201 2011-11-17 10:43 2011-03-8 Show GitHub Exploit DB Packet Storm
203180 6.8 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2011-1200 2011-11-17 10:40 2011-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 27, 2024, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 - - - Gogs is an open source self-hosted Git service. A malicious user is able to commit and edit a crafted symlink file to a repository to gain SSH access to the server. The vulnerability is fixed in 0.13… - CVE-2024-54148 2024-12-24 11:15 2024-12-24 Show GitHub Exploit DB Packet Storm
162 - - - Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery i… - CVE-2024-53275 2024-12-24 11:15 2024-12-24 Show GitHub Exploit DB Packet Storm
163 - - - Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to… - CVE-2024-56326 2024-12-24 11:15 2024-12-24 Show GitHub Exploit DB Packet Storm
164 - - - Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity. The signature helps prevent malicious actors from modifying t… - CVE-2024-23945 2024-12-24 11:15 2024-12-24 Show GitHub Exploit DB Packet Storm
165 - - - A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legac… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2018-25106 2024-12-24 08:15 2024-12-24 Show GitHub Exploit DB Packet Storm
166 7.4 HIGH
Network 		- - ColdFusion versions 2023.11, 2021.17 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file syst… CWE-22
Path Traversal 		CVE-2024-53961 2024-12-24 06:15 2024-12-24 Show GitHub Exploit DB Packet Storm
167 - - - APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerabil… CWE-97
CVE-2024-56363 2024-12-24 03:15 2024-12-24 Show GitHub Exploit DB Packet Storm
168 - - - Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice intr… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-56362 2024-12-24 03:15 2024-12-24 Show GitHub Exploit DB Packet Storm
169 - - - An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution. - CVE-2024-56084 2024-12-24 03:15 2024-12-16 Show GitHub Exploit DB Packet Storm
170 - - - SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary J… CWE-79
Cross-site Scripting 		CVE-2024-56364 2024-12-24 01:15 2024-12-24 Show GitHub Exploit DB Packet Storm