Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206611 5 警告 JSecurity
Apache Software Foundation		 - Apache Shiro および JSecurity におけるアクセス制限を回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3863 2011-06-10 09:52 2010-11-5 Show GitHub Exploit DB Packet Storm
206612 4.3 警告 Apache Software Foundation - Apache CouchDB の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3854 2011-06-10 09:52 2011-01-28 Show GitHub Exploit DB Packet Storm
206613 4.3 警告 The Dojo Foundation
Apache Software Foundation		 - Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6726 2011-06-10 09:51 2009-04-9 Show GitHub Exploit DB Packet Storm
206614 4.3 警告 Apache Software Foundation - Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1548 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
206615 7.8 危険 Apache Software Foundation - Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-1547 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
206616 4.3 警告 Apache Software Foundation
レッドハット		 - Apache Struts におけるクロスサイトスクリプティングの脆弱性 - CVE-2005-3745 2011-06-10 09:49 2005-11-22 Show GitHub Exploit DB Packet Storm
206617 4.6 警告 Linux
レッドハット		 - Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1581 2011-06-9 10:31 2011-05-18 Show GitHub Exploit DB Packet Storm
206618 10 危険 Google
レッドハット		 - Google Chrome におけるアドレスバーを偽装される脆弱性 CWE-DesignError
CVE-2010-3115 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
206619 10 危険 Google
レッドハット		 - Google Chrome の text-editing 実装における脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3114 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
206620 10 危険 Google
レッドハット		 - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-3113 2011-06-9 10:29 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1451 7.5 HIGH
Network 		huawei harmonyos Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability. CWE-908
 Use of Uninitialized Resource 		CVE-2024-56446 2025-01-14 06:41 2025-01-8 Show GitHub Exploit DB Packet Storm
1452 5.3 MEDIUM
Network 		huawei harmonyos Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. CWE-287
Improper Authentication 		CVE-2024-56445 2025-01-14 06:41 2025-01-8 Show GitHub Exploit DB Packet Storm
1453 7.5 HIGH
Network 		huawei harmonyos Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-noinfo
CVE-2024-56444 2025-01-14 06:40 2025-01-8 Show GitHub Exploit DB Packet Storm
1454 7.5 HIGH
Network 		huawei harmonyos Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-noinfo
CVE-2024-56443 2025-01-14 06:40 2025-01-8 Show GitHub Exploit DB Packet Storm
1455 7.5 HIGH
Network 		huawei emui
harmonyos 		Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. NVD-CWE-noinfo
CVE-2024-56442 2025-01-14 06:40 2025-01-8 Show GitHub Exploit DB Packet Storm
1456 5.9 MEDIUM
Network 		huawei emui
harmonyos 		Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-362
Race Condition 		CVE-2024-56441 2025-01-14 06:28 2025-01-8 Show GitHub Exploit DB Packet Storm
1457 7.5 HIGH
Network 		huawei harmonyos
emui 		Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. CWE-276
Incorrect Default Permissions  		CVE-2024-56440 2025-01-14 06:28 2025-01-8 Show GitHub Exploit DB Packet Storm
1458 7.5 HIGH
Network 		huawei harmonyos Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-Other
CVE-2024-56439 2025-01-14 06:28 2025-01-8 Show GitHub Exploit DB Packet Storm
1459 7.5 HIGH
Network 		huawei harmonyos
emui 		Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability. NVD-CWE-noinfo
CVE-2024-56438 2025-01-14 06:27 2025-01-8 Show GitHub Exploit DB Packet Storm
1460 7.5 HIGH
Network 		huawei harmonyos Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. NVD-CWE-noinfo
CVE-2024-56436 2025-01-14 06:27 2025-01-8 Show GitHub Exploit DB Packet Storm