Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 3, 2025, 1:14 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 205881 | 4.3 | 警告 | マイクロソフト | - | Microsoft Internet Explorer におけるコンテンツを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3404 | 2011-12-16 11:52 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205882 | 9.3 | 危険 | マイクロソフト | - | Windows 2008 および Windows 7 上で稼働する Microsoft Internet Explorer 9 における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2011-2019 | 2011-12-16 11:50 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205883 | 7.2 | 危険 | マイクロソフト | - | 複数の Microsoft Windows のカーネルにおける権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-2018 | 2011-12-16 11:49 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205884 | 4.3 | 警告 | マイクロソフト | - | Microsoft Internet Explorer 8 の XSS フィルタにおけるコンテンツを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2011-1992 | 2011-12-16 11:48 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205885 | 9.3 | 危険 | マイクロソフト | - | Microsoft Excel および Office における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-3403 | 2011-12-16 11:40 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205886 | 9 | 危険 | マイクロソフト | - | Microsoft Windows におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-3406 | 2011-12-16 11:38 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205887 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft PowerPoint 製品における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-3413 | 2011-12-16 11:37 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205888 | 9.3 | 危険 | マイクロソフト | - | Microsoft PowerPoint 2007 および 2010 における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2011-3396 | 2011-12-16 11:36 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205889 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-3400 | 2011-12-16 11:35 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
| 205890 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft Windows 製品の ENCDEC.DLL における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-3401 | 2011-12-16 11:34 | 2011-12-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Feb. 4, 2025, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2211 | 5.4 |
MEDIUM
Network |
vanderbilt | redcap | A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the re… |
CWE-79
Cross-site Scripting |
CVE-2024-56376 | 2025-01-17 06:10 | 2025-01-10 | Show | GitHub Exploit DB Packet Storm |
| 2212 | 9.8 |
CRITICAL
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.
|
CWE-22
|
Path Traversal
CVE-2024-13181
|
2025-01-17 06:02 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 2213 | 7.5 |
HIGH
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.
|
CWE-22
|
Path Traversal
CVE-2024-13180
|
2025-01-17 06:01 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 2214 | 9.8 |
CRITICAL
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.
|
CWE-22
|
Path Traversal
CVE-2024-13179
|
2025-01-17 06:01 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 2215 | 7.8 |
HIGH
Local |
adobe | illustrator | Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2025-21134 | 2025-01-17 05:43 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 2216 | 8.8 |
HIGH
Network |
chrome | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CWE-125
Out-of-bounds Read |
CVE-2025-0437 | 2025-01-17 05:35 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm | |
| 2217 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_11_23h2 windows_10_1607 windows_10_1809 windows_10_1507 windows_10_21h2 windows_10_22h2 windows_11_… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21417 | 2025-01-17 05:34 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 2218 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21413 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 2219 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21411 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 2220 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21409 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |