Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 16, 2025, 6:05 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208691	9.3	危険	Artifex Software サイバートラスト株式会社 Argyll CMS サン・マイクロシステムズレッドハット	-	Ghostscript の ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0792	2010-02-17 11:44	2009-04-14	Show	GitHub Exploit DB Packet Storm

208692	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-0584	2010-02-17 11:44	2009-03-23	Show	GitHub Exploit DB Packet Storm

208693	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0583	2010-02-17 11:43	2009-03-23	Show	GitHub Exploit DB Packet Storm

208694	6	警告	Artifex Software サイバートラスト株式会社レッドハット	-	Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0411	2010-02-17 11:43	2008-02-27	Show	GitHub Exploit DB Packet Storm

208695	2.1	注意	サイバートラスト株式会社レッドハット	-	lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性	-	CVE-2005-2672	2010-02-17 11:43	2005-08-22	Show	GitHub Exploit DB Packet Storm

208696	9.3	危険	アップル	-	Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0037	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

208697	9.3	危険	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0036	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

208698	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4003	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

208699	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4002	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

208700	6.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における競合状態の脆弱性	CWE-362 競合状態	CVE-2009-3547	2010-02-16 11:44	2009-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2361	-		-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themify Themify Builder allows PHP Local File Inclusion.This issue affects The…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2024-56216	2024-12-31 19:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2362	-		-	-	Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro allows Path Traversal.This issue affects Userpro: from n/a through 5.1.9.	CWE-35 Path Traversal: '.../...//'	CVE-2024-56214	2024-12-31 19:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2363	-		-	-	Path Traversal: '.../...//' vulnerability in Themewinter Eventin allows Path Traversal.This issue affects Eventin: from n/a through 4.0.7.	CWE-35 Path Traversal: '.../...//'	CVE-2024-56213	2024-12-31 19:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2364	-		-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userpro.This issue affects Userpro: from n/a through 5.1.9.	CWE-89 SQL Injection	CVE-2024-56212	2024-12-31 19:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2365	-		-	-	Missing Authorization vulnerability in DeluxeThemes Userpro.This issue affects Userpro: from n/a through 5.1.9.	CWE-862 Missing Authorization	CVE-2024-56211	2024-12-31 19:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2366	-		-	-	Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen failure count by hardware fault injection. User interaction is required for tr…	-	CVE-2024-49422	2024-12-31 18:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2367	-		-	-	The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plu…	-	CVE-2024-11972	2024-12-31 15:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2368	7.6	HIGH Network	-	-	A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod.…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-45497	2024-12-31 12:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2369	8.8	HIGH Network	-	-	The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access ce…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-13040	2024-12-31 11:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

2370	8.8	HIGH Network	-	-	The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed …	CWE-294 Authentication Bypass by Capture-replay	CVE-2024-12839	2024-12-31 11:15	2024-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed