Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 26, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
51 8.3 重要
Network 		オラクル
NetApp
日立		 uCosminexus Application Server Light
uCosminexus Application Server-R
uCosminexus Client for ATM
uCosminexus Developer Professional
E-Ser… 		Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 Update CWE-noinfo
情報不足 		CVE-2020-14583 2024-12-24 16:54 2020-07-14 Show GitHub Exploit DB Packet Storm
52 3.7 低
Network 		オラクル
NetApp
日立		 uCosminexus Application Server Light
uCosminexus Application Server-R
uCosminexus Client for ATM
uCosminexus Developer Professional
E-Ser… 		Oracle Java SE および Java SE Embedded における 2D に関する脆弱性 Update CWE-noinfo
情報不足 		CVE-2020-14581 2024-12-24 16:38 2020-07-14 Show GitHub Exploit DB Packet Storm
53 5.5 警告
Local 		Linux
Debian		 Debian GNU/Linux
Linux Kernel 		Linux の Linux Kernel 等複数ベンダの製品における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-27077 2024-12-24 16:24 2024-02-5 Show GitHub Exploit DB Packet Storm
54 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-27060 2024-12-24 16:19 2024-02-16 Show GitHub Exploit DB Packet Storm
55 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-27051 2024-12-24 16:16 2024-01-23 Show GitHub Exploit DB Packet Storm
56 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2024-27049 2024-12-24 16:14 2024-02-22 Show GitHub Exploit DB Packet Storm
57 5.5 警告
Local 		Linux
Debian		 Debian GNU/Linux
Linux Kernel 		Linux の Linux Kernel 等複数ベンダの製品における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-27076 2024-12-24 16:07 2024-02-16 Show GitHub Exploit DB Packet Storm
58 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 New CWE-129
配列インデックスの不適切な検証 		CVE-2024-27042 2024-12-24 16:06 2024-02-7 Show GitHub Exploit DB Packet Storm
59 8.1 重要
Network 		scala-bin project scala-bin scala-bin における暗号に関する脆弱性 Update CWE-310
CWE-311
CVE-2016-10627 2024-12-24 16:05 2017-01-1 Show GitHub Exploit DB Packet Storm
60 6.3 警告
Local 		Linux
Debian		 Debian GNU/Linux
Linux Kernel 		Linux の Linux Kernel 等複数ベンダの製品における競合状態に関する脆弱性 New CWE-362
競合状態 		CVE-2024-27030 2024-12-24 16:02 2024-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 26, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 - - - Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulne… New CWE-378
 Creation of Temporary File With Insecure Permissions 		CVE-2024-52543 2024-12-26 01:15 2024-12-26 Show GitHub Exploit DB Packet Storm
2 - - - Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerabili… New CWE-294
Authentication Bypass by Capture-replay  		CVE-2024-52534 2024-12-26 01:15 2024-12-26 Show GitHub Exploit DB Packet Storm
3 - - - Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vuln… New CWE-1230
 Exposure of Sensitive Information Through Metadata 		CVE-2024-53291 2024-12-26 00:15 2024-12-26 Show GitHub Exploit DB Packet Storm
4 5.5 MEDIUM
Local 		- - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. New CWE-362
Race Condition 		CVE-2024-52906 2024-12-26 00:15 2024-12-26 Show GitHub Exploit DB Packet Storm
5 - - - Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remed… New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2024-52535 2024-12-26 00:15 2024-12-26 Show GitHub Exploit DB Packet Storm
6 - - - Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leadi… New CWE-250
 Execution with Unnecessary Privileges 		CVE-2024-47978 2024-12-26 00:15 2024-12-26 Show GitHub Exploit DB Packet Storm
7 5.5 MEDIUM
Local 		- - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. New CWE-20
 Improper Input Validation  		CVE-2024-47102 2024-12-26 00:15 2024-12-26 Show GitHub Exploit DB Packet Storm
8 - - - An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be a… New CWE-213
 Exposure of Sensitive Information Due to Incompatible Policies 		CVE-2023-5117 2024-12-26 00:15 2024-12-26 Show GitHub Exploit DB Packet Storm
9 4.3 MEDIUM
Network 		- - IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remot… Update CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-51464 2024-12-26 00:15 2024-12-21 Show GitHub Exploit DB Packet Storm
10 6.1 MEDIUM
Network 		- - IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expo… New CWE-1022
 Use of Web Link to Untrusted Target with window.opener Access 		CVE-2024-39727 2024-12-25 23:15 2024-12-25 Show GitHub Exploit DB Packet Storm