Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 4:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257881 | 2.1 | 注意 | アップル | - | Apple iOS のホームスクリーンコンポーネントにおける重要な状態情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3431 | 2011-10-24 16:47 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257882 | 5 | 警告 | アップル | - | Apple iOS の UIKit アラートコンポーネントにおけるサービス運用妨害 (デバイスハング) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-3432 | 2011-10-24 16:46 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257883 | 4.3 | 警告 | アップル | - | Apple iOS の WiFi コンポーネントにおける重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3434 | 2011-10-24 16:46 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257884 | 4.3 | 警告 | アップル | - | Apple iOS および Safari で使用される WebKit におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3243 | 2011-10-24 16:43 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257885 | 2.1 | 注意 | アップル | - | Apple iOS のキーボードコンポーネントにおける重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3245 | 2011-10-24 16:43 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257886 | 2.6 | 注意 | アップル | - | Apple iOS の CalDAV における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3253 | 2011-10-24 16:43 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257887 | 4.3 | 警告 | アップル | - | Apple iOS のカレンダーにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3254 | 2011-10-24 16:42 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257888 | 4.3 | 警告 | アップル | - | Apple iOS の CFNetwork における重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3255 | 2011-10-24 16:33 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257889 | 2.1 | 注意 | アップル | - | Apple iOS の Data Access コンポーネントにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-3257 | 2011-10-24 16:32 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
| 257890 | 6.8 | 警告 | アップル | - | Apple iOS の OfficeImport におけるバッファオーバーフローの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-3260 | 2011-10-24 16:30 | 2011-10-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249401 | 7.0 |
HIGH
Local |
linux canonical |
linux_kernel ubuntu_linux |
A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on … |
CWE-787
Out-of-bounds Write |
CVE-2018-16880 | 2024-11-21 12:53 | 2019-01-30 | Show | GitHub Exploit DB Packet Storm |
| 249402 | 7.5 |
HIGH
Network |
redhat | ceph | Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerab… | - | CVE-2018-16889 | 2024-11-21 12:53 | 2019-01-28 | Show | GitHub Exploit DB Packet Storm |
| 249403 | 7.5 |
HIGH
Network |
rsyslog redhat debian |
rsyslog enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_for_scientific_computing enterprise_linux_server enterprise_linux_for_power_little_endian enterprise_l… |
A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions befo… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-16881 | 2024-11-21 12:53 | 2019-01-26 | Show | GitHub Exploit DB Packet Storm |
| 249404 | 6.5 |
MEDIUM
Network |
redhat debian opensuse canonical |
ceph debian_linux leap enterprise_linux_server ceph_storage ubuntu_linux |
It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices. | - | CVE-2018-16846 | 2024-11-21 12:53 | 2019-01-16 | Show | GitHub Exploit DB Packet Storm |
| 249405 | 5.4 |
MEDIUM
Network |
redhat theforeman |
satellite katello |
A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other… |
CWE-79
Cross-site Scripting |
CVE-2018-16887 | 2024-11-21 12:53 | 2019-01-13 | Show | GitHub Exploit DB Packet Storm |
| 249406 | 4.7 |
MEDIUM
Local |
systemd_project redhat canonical netapp |
systemd enterprise_linux ubuntu_linux element_software active_iq_performance_analytics_services |
It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service … |
CWE-269
Improper Privilege Management |
CVE-2018-16888 | 2024-11-21 12:53 | 2019-01-15 | Show | GitHub Exploit DB Packet Storm |
| 249407 | 8.1 |
HIGH
Network |
etcd redhat fedoraproject |
etcd enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server fedora |
etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd … |
CWE-287
Improper Authentication |
CVE-2018-16886 | 2024-11-21 12:53 | 2019-01-15 | Show | GitHub Exploit DB Packet Storm |
| 249408 | 7.8 |
HIGH
Local |
systemd_project redhat debian canonical oracle |
systemd enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus debian_l… |
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A loca… | - | CVE-2018-16865 | 2024-11-21 12:53 | 2019-01-12 | Show | GitHub Exploit DB Packet Storm |
| 249409 | 7.8 |
HIGH
Local |
systemd_project redhat debian canonical oracle |
systemd enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus debian_l… |
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls sy… | - | CVE-2018-16864 | 2024-11-21 12:53 | 2019-01-12 | Show | GitHub Exploit DB Packet Storm |
| 249410 | 3.3 |
LOW
Local |
systemd_project debian canonical netapp redhat |
systemd debian_linux ubuntu_linux active_iq_performance_analytics_services element_software enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_for_scientific_… |
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Version… | - | CVE-2018-16866 | 2024-11-21 12:53 | 2019-01-12 | Show | GitHub Exploit DB Packet Storm |