Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 29, 2024, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203441 4.3 警告 GNOME Project - Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3635 2011-10-31 10:11 2011-10-23 Show GitHub Exploit DB Packet Storm
203442 1.2 注意 ヒューレット・パッカード - HP MFP Digital Sending ソフトウェアにおける重要なワークフローメタデータ情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3163 2011-10-31 10:10 2011-10-19 Show GitHub Exploit DB Packet Storm
203443 4.9 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2060 2011-10-31 10:08 2011-10-22 Show GitHub Exploit DB Packet Storm
203444 5 警告 シスコシステムズ - Cisco IOS の ipv6 コンポーネントにおけるフィンガープリンティング攻撃を誘導される脆弱性 CWE-200
情報漏えい 		CVE-2011-2059 2011-10-31 10:07 2011-06-21 Show GitHub Exploit DB Packet Storm
203445 7.8 危険 シスコシステムズ - Cisco IOS の cat6000-dot1x コンポーネントにおけるサービス運用妨害 (トラフィックストーム) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2058 2011-10-31 10:06 2011-10-22 Show GitHub Exploit DB Packet Storm
203446 5 警告 黄昏フロンティア - 東方緋想天におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3995 2011-10-28 12:06 2011-10-28 Show GitHub Exploit DB Packet Storm
203447 10 危険 D-Link Systems, Inc. - 複数の D-Link 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3992 2011-10-28 12:05 2011-10-28 Show GitHub Exploit DB Packet Storm
203448 5.1 警告 FFFTPプロジェクト - FFFTP における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2011-3991 2011-10-28 12:01 2011-10-28 Show GitHub Exploit DB Packet Storm
203449 9 危険 シスコシステムズ - Cisco CiscoWorks Common Services の Home Page コンポーネントにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3310 2011-10-28 11:44 2011-10-19 Show GitHub Exploit DB Packet Storm
203450 6.5 警告 シスコシステムズ - Cisco Show and Share における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-2585 2011-10-28 11:44 2011-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 29, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1061 - - - A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash,… - CVE-2024-12179 2024-12-18 01:15 2024-12-18 Show GitHub Exploit DB Packet Storm
1062 - - - A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in t… - CVE-2024-12178 2024-12-18 01:15 2024-12-18 Show GitHub Exploit DB Packet Storm
1063 - - - A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause dat… - CVE-2024-11422 2024-12-18 01:15 2024-12-18 Show GitHub Exploit DB Packet Storm
1064 - - - Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pr… - CVE-2024-10476 2024-12-18 01:15 2024-12-18 Show GitHub Exploit DB Packet Storm
1065 - - - A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Denial of Service (DoS) via a crafted HTTP … - CVE-2024-36831 2024-12-18 01:15 2024-12-18 Show GitHub Exploit DB Packet Storm
1066 - - - An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. - CVE-2024-37773 2024-12-18 01:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1067 - - - ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials. - CVE-2024-55557 2024-12-18 01:15 2024-12-17 Show GitHub Exploit DB Packet Storm
1068 5.4 MEDIUM
Network 		adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable … CWE-79
Cross-site Scripting 		CVE-2024-52818 2024-12-18 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm
1069 5.4 MEDIUM
Network 		adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable … CWE-79
Cross-site Scripting 		CVE-2024-52817 2024-12-18 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm
1070 5.4 MEDIUM
Network 		adobe experience_manager Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable … CWE-79
Cross-site Scripting 		CVE-2024-52816 2024-12-18 01:15 2024-12-11 Show GitHub Exploit DB Packet Storm