Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 9, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203261 7.8 危険 Stichting NLnet Labs - Unbound の validator/val_nsec3.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4869 2011-12-21 15:48 2011-12-20 Show GitHub Exploit DB Packet Storm
203262 6.8 警告 D-Link Systems, Inc. - D-Link DIR-300 ルータにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-4723 2011-12-21 15:36 2011-12-20 Show GitHub Exploit DB Packet Storm
203263 10 危険 Schneider Electric - NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4861 2011-12-21 15:30 2011-12-12 Show GitHub Exploit DB Packet Storm
203264 10 危険 Schneider Electric - NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2011-4860 2011-12-21 15:29 2011-12-12 Show GitHub Exploit DB Packet Storm
203265 10 危険 Schneider Electric - Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性 CWE-DesignError
CVE-2011-4859 2011-12-21 15:28 2011-12-12 Show GitHub Exploit DB Packet Storm
203266 10 危険 Nullsoft - Winamp の in_mod.dll プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4857 2011-12-21 15:27 2011-12-9 Show GitHub Exploit DB Packet Storm
203267 6.8 警告 HomeSeer Technologies, LLC. - HomeSeer HS2 の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4837 2011-12-21 15:25 2011-12-15 Show GitHub Exploit DB Packet Storm
203268 4.3 警告 HomeSeer Technologies, LLC. - HomeSeer HS2 の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4836 2011-12-21 15:24 2011-12-15 Show GitHub Exploit DB Packet Storm
203269 7.5 危険 HomeSeer Technologies, LLC. - HomeSeer HS2 の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4835 2011-12-21 15:23 2011-12-15 Show GitHub Exploit DB Packet Storm
203270 9.3 危険 RSAセキュリティ - EMC RSA SecurID Software Token における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-4141 2011-12-21 14:34 2011-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 9, 2025, 4:56 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1981 - - - A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid… CWE-122
Heap-based Buffer Overflow 		CVE-2020-12819 2024-12-19 17:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1982 4.3 MEDIUM
Network 		- - The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_bloc… CWE-200
Information Exposure 		CVE-2024-12560 2024-12-19 16:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1983 5.3 MEDIUM
Network 		- - The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up… CWE-285
Improper Authorization 		CVE-2024-11768 2024-12-19 15:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1984 7.3 HIGH
Network 		- - The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an act… CWE-94
Code Injection 		CVE-2024-11740 2024-12-19 15:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1985 - - - CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further… - CVE-2024-38499 2024-12-19 15:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1986 - - - Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit thi… CWE-88
Argument Injection 		CVE-2024-51532 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1987 7.8 HIGH
Local 		- - IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. CWE-250
 Execution with Unnecessary Privileges 		CVE-2024-35141 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1988 5.4 MEDIUM
Network 		- - The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-12121 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1989 6.5 MEDIUM
Network 		- - The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.15 via the Project Task List ('/wp-json/pm/v2/projects/1/task-lis… CWE-200
Information Exposure 		CVE-2024-10548 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm
1990 5.3 MEDIUM
Network 		- - IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2023-30443 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm