CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 24/12/2023 |
| CVE-2023-4256 | 中5.5 | Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (Do | 21/12/2023 |
| CVE-2023-4255 | 中5.5 | An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of | 21/12/2023 |
| CVE-2023-5764 | 高7.8 | A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data. | 12/12/2023 |
| CVE-2023-5341 | 中5.5 | A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. | 19/11/2023 |
| CVE-2023-5543 | 低3.3 | When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting. | 09/11/2023 |
| CVE-2023-5551 | 低3.3 | Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. | 09/11/2023 |
| CVE-2023-5550 | 緊急9.8 | In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution. | 09/11/2023 |
| CVE-2023-5549 | 中5.3 | Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage. | 09/11/2023 |
| CVE-2023-5548 | 中5.3 | Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection. | 09/11/2023 |
| CVE-2023-5545 | 中5.3 | H5P metadata automatically populated the author with the user's username, which could be sensitive information. | 09/11/2023 |
| CVE-2023-5542 | 中4.3 | Students in "Only see own membership" groups could see other students in the group, which should be hidden. | 09/11/2023 |
| CVE-2023-5540 | 高8.8 | A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers. | 09/11/2023 |
| CVE-2023-5539 | 高8.8 | A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers. | 09/11/2023 |
| CVE-2023-3428 | 中5.5 | A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service. | 04/10/2023 |
| CVE-2022-4318 | 高7.8 | A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | 25/09/2023 |
| CVE-2023-38253 | 中5.5 | An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file. | 14/07/2023 |
| CVE-2023-38252 | 中5.5 | An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file. | 14/07/2023 |