Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 24, 2024, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203401 6.8 警告 アップル - Apple iOS の OfficeImport におけるメモリ二重解放の脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3261 2011-10-24 16:30 2011-10-14 Show GitHub Exploit DB Packet Storm
203402 - - OneOrZero - OneOrZero AIMS に複数の脆弱性 - - 2011-10-24 11:14 2011-10-14 Show GitHub Exploit DB Packet Storm
203403 7.6 危険 アップル - 複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3236 2011-10-24 11:08 2011-10-12 Show GitHub Exploit DB Packet Storm
203404 7.6 危険 アップル - 複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3237 2011-10-24 11:08 2011-10-12 Show GitHub Exploit DB Packet Storm
203405 7.6 危険 アップル - Apple iTunes で使用される CoreFoundation におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-0259 2011-10-24 11:07 2011-10-12 Show GitHub Exploit DB Packet Storm
203406 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1999 2011-10-21 15:40 2011-10-11 Show GitHub Exploit DB Packet Storm
203407 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1998 2011-10-21 15:39 2011-10-11 Show GitHub Exploit DB Packet Storm
203408 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1997 2011-10-21 15:39 2011-10-11 Show GitHub Exploit DB Packet Storm
203409 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1996 2011-10-21 15:38 2011-10-11 Show GitHub Exploit DB Packet Storm
203410 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1995 2011-10-21 15:35 2011-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 24, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1331 - - - Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php. - CVE-2024-54918 2024-12-13 03:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1332 7.2 HIGH
Network 		lopalopa e-learning_management_system Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php. CWE-89
SQL Injection 		CVE-2024-54933 2024-12-13 03:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1333 7.2 HIGH
Network 		lopalopa e-learning_management_system Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php. CWE-89
SQL Injection 		CVE-2024-54930 2024-12-13 03:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1334 7.2 HIGH
Network 		lopalopa e-learning_management_system A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access v… CWE-89
SQL Injection 		CVE-2024-54922 2024-12-13 03:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1335 - - - Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files. - CVE-2024-55578 2024-12-13 03:15 2024-12-9 Show GitHub Exploit DB Packet Storm
1336 - - - The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root … - CVE-2024-28139 2024-12-13 02:15 2024-12-12 Show GitHub Exploit DB Packet Storm
1337 - - - AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is, for example, used in certain ASUS devices. - CVE-2022-29974 2024-12-13 02:15 2024-12-10 Show GitHub Exploit DB Packet Storm
1338 6.5 MEDIUM
Network 		- - IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation. CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2024-52901 2024-12-13 01:15 2024-12-13 Show GitHub Exploit DB Packet Storm
1339 - - - Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configur… - CVE-2024-47947 2024-12-13 01:15 2024-12-12 Show GitHub Exploit DB Packet Storm
1340 - - - Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configur… - CVE-2024-36498 2024-12-13 01:15 2024-12-12 Show GitHub Exploit DB Packet Storm