You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
|
Update Date":Feb. 3, 2025, 1:14 p.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
205911 | 7.5 | 危険 | Brandon Long | - | Clearsilver の p_cgi_error 関数におけるサービス運用妨害 (クラッシュ) の脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2011-4357 | 2011-12-13 15:11 | 2011-11-28 | Show | GitHub Exploit DB Packet Storm |
205912 | 4.6 | 警告 | freedesktop.org | - | colord の cd-mapping-db.c および cd-device-db.c における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4349 | 2011-12-13 15:10 | 2011-12-10 | Show | GitHub Exploit DB Packet Storm |
205913 | 3.5 | 注意 | レッドハット | - | Red Hat Network (RHN) Satellite におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2011-4346 | 2011-12-13 15:07 | 2011-12-7 | Show | GitHub Exploit DB Packet Storm |
205914 | 10 | 危険 | Google サムスン 日本エイサー |
- | Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-4719 | 2011-12-13 15:06 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
205915 | 5 | 警告 | Dream Property GmbH | - | DreamBox DM800 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4716 | 2011-12-13 15:06 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
205916 | 5 | 警告 | Koha | - | Koha および LibLime Koha におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4715 | 2011-12-13 15:05 | 2011-11-25 | Show | GitHub Exploit DB Packet Storm |
205917 | 5 | 警告 | Virtual Vertex | - | Virtual Vertex Muster におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4714 | 2011-12-13 15:02 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
205918 | 5 | 警告 | osCSS | - | osCSS の catalog/content.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4713 | 2011-12-13 15:01 | 2011-11-8 | Show | GitHub Exploit DB Packet Storm |
205919 | 5 | 警告 | monoxide0184 | - | Oxide WebServer におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4712 | 2011-12-13 14:59 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
205920 | 5 | 警告 | Namazu Project | - | Namazu の namazu.cgi におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4711 | 2011-12-13 14:57 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
Update Date:Feb. 4, 2025, 4:08 a.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
2211 | 5.4 |
MEDIUM
Network |
vanderbilt | redcap | A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the re… |
CWE-79
Cross-site Scripting |
CVE-2024-56376 | 2025-01-17 06:10 | 2025-01-10 | Show | GitHub Exploit DB Packet Storm |
2212 | 9.8 |
CRITICAL
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.
|
CWE-22
|
Path Traversal
CVE-2024-13181
|
2025-01-17 06:02 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2213 | 7.5 |
HIGH
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.
|
CWE-22
|
Path Traversal
CVE-2024-13180
|
2025-01-17 06:01 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2214 | 9.8 |
CRITICAL
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.
|
CWE-22
|
Path Traversal
CVE-2024-13179
|
2025-01-17 06:01 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2215 | 7.8 |
HIGH
Local |
adobe | illustrator | Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2025-21134 | 2025-01-17 05:43 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
2216 | 8.8 |
HIGH
Network |
chrome | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CWE-125
Out-of-bounds Read |
CVE-2025-0437 | 2025-01-17 05:35 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm | |
2217 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_11_23h2 windows_10_1607 windows_10_1809 windows_10_1507 windows_10_21h2 windows_10_22h2 windows_11_… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21417 | 2025-01-17 05:34 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
2218 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21413 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
2219 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21411 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
2220 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21409 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |