Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206841	9.3	危険	アップルアドビシステムズターボリナックスヒューレット・パッカードレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2188	2010-11-30 14:07	2010-06-10	Show	GitHub Exploit DB Packet Storm

206842	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2187	2010-11-30 14:06	2010-06-10	Show	GitHub Exploit DB Packet Storm

206843	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 CWE-noinfo	CVE-2010-2186	2010-11-30 14:05	2010-06-10	Show	GitHub Exploit DB Packet Storm

206844	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2185	2010-11-30 14:04	2010-06-10	Show	GitHub Exploit DB Packet Storm

206845	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2184	2010-11-30 14:03	2010-06-10	Show	GitHub Exploit DB Packet Storm

206846	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2183	2010-11-30 14:01	2010-06-10	Show	GitHub Exploit DB Packet Storm

206847	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2182	2010-11-30 14:00	2010-06-10	Show	GitHub Exploit DB Packet Storm

206848	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2181	2010-11-30 13:58	2010-06-10	Show	GitHub Exploit DB Packet Storm

206849	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2180	2010-11-30 13:57	2010-06-10	Show	GitHub Exploit DB Packet Storm

206850	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2179	2010-11-30 13:54	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2471	-		-	-	Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::LocalStore` which means uploads and backups are stored…	CWE-200 Information Exposure	CVE-2024-53991	2024-12-20 05:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2472	-		-	-	Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advis…	CWE-79 Cross-site Scripting	CVE-2024-52794	2024-12-20 05:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2473	-		-	-	Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patc…	CWE-200 Information Exposure	CVE-2024-52589	2024-12-20 05:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2474	-		-	-	Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create a…	CWE-359 Exposure of Private Personal Information to an Unauthorized Actor	CVE-2024-49765	2024-12-20 05:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2475	-		-	-	In a specific scenario a LDAP user can abuse the authentication process in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 2…	-	CVE-2024-12111	2024-12-20 05:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2476	-		-	-	Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image proxy for compressing and resizing remote files could allow attacks that could af…	CWE-405 CWE-400 Asymmetric Resource Consumption (Amplification) Uncontrolled Resource Consumption	CVE-2024-56200	2024-12-20 04:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2477	-		-	-	Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers.	-	CVE-2024-55196	2024-12-20 04:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2478	-		-	-	The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.	-	CVE-2020-6923	2024-12-20 04:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2479	6.2	MEDIUM Local	-	-	IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.	CWE-209 Information Exposure Through an Error Message	CVE-2024-52897	2024-12-20 03:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

2480	5.3	MEDIUM Network	-	-	IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of …	CWE-125 Out-of-bounds Read	CVE-2024-51471	2024-12-20 03:15	2024-12-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed