Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188491 7.5 危険 John Geo - Blogs Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5110 2012-08-27 14:30 2012-08-23 Show GitHub Exploit DB Packet Storm
188492 7.5 危険 John Geo - Freelancer calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5109 2012-08-27 14:29 2012-08-23 Show GitHub Exploit DB Packet Storm
188493 4.3 警告 AdaptCMS - AdaptCMS の config.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5108 2012-08-27 14:29 2012-08-23 Show GitHub Exploit DB Packet Storm
188494 4.3 警告 WordPress.org - WordPress 用 Alert Before Your Post プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5107 2012-08-27 14:28 2012-08-23 Show GitHub Exploit DB Packet Storm
188495 4.3 警告 Fractalia - WordPress 用 Flexible Custom Post Type プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5106 2012-08-27 14:27 2012-08-23 Show GitHub Exploit DB Packet Storm
188496 4.3 警告 Zoho Corporation - ZOHO ManageEngine ADSelfService の EmployeeSearch.cc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5105 2012-08-27 14:27 2012-08-23 Show GitHub Exploit DB Packet Storm
188497 4.3 警告 GetShopped.org - WordPress 用 WP e-Commerce プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5104 2012-08-27 14:26 2012-08-23 Show GitHub Exploit DB Packet Storm
188498 7.5 危険 ALURIAN - Alurian Prismotube PHP Video Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5103 2012-08-27 14:26 2012-08-23 Show GitHub Exploit DB Packet Storm
188499 9.3 危険 Foxit Software Inc - Windows XP および Windows 7 上で稼働する Foxit Reader における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2012-4337 2012-08-27 14:25 2012-04-12 Show GitHub Exploit DB Packet Storm
188500 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の nsSMILTimeValueSpec::ConvertBetweenTimeContainer 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0457 2012-08-24 17:43 2012-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 7.8 HIGH
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A l… Update CWE-77
Command Injection 		CVE-2024-49557 2024-11-16 02:36 2024-11-12 Show GitHub Exploit DB Packet Storm
232 3.3 LOW
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local… Update CWE-552
 Files or Directories Accessible to External Parties 		CVE-2024-48838 2024-11-16 02:36 2024-11-12 Show GitHub Exploit DB Packet Storm
233 - - - Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, the API returns them and adds them into the frontend… New CWE-200
Information Exposure 		CVE-2024-52523 2024-11-16 02:35 2024-11-16 Show GitHub Exploit DB Packet Storm
234 - - - Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloading bigger websites than intended, to find open-… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-52520 2024-11-16 02:35 2024-11-16 Show GitHub Exploit DB Packet Storm
235 4.9 MEDIUM
Network 		- - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This… New CWE-20
 Improper Input Validation  		CVE-2021-1470 2024-11-16 02:35 2024-11-16 Show GitHub Exploit DB Packet Storm
236 7.8 HIGH
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit … Update CWE-77
Command Injection 		CVE-2024-49560 2024-11-16 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
237 7.8 HIGH
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti… Update NVD-CWE-noinfo
CVE-2024-49558 2024-11-16 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
238 8.8 HIGH
Network 		anisha job_recruitment A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulat… Update CWE-89
SQL Injection 		CVE-2024-11127 2024-11-16 02:29 2024-11-13 Show GitHub Exploit DB Packet Storm
239 7.5 HIGH
Network 		eclipse mosquitto In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "U… Update CWE-416
CWE-401
CWE-755
 Use After Free
 Missing Release of Memory after Effective Lifetime
 Improper Handling of Exceptional Conditions 		CVE-2024-8376 2024-11-16 02:21 2024-10-12 Show GitHub Exploit DB Packet Storm
240 5.4 MEDIUM
Network 		nicheaddons sales_page_addon Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Sales Page Addon – Elementor & Beaver Builder allows Stored XSS.This issue aff… Update CWE-79
Cross-site Scripting 		CVE-2024-51585 2024-11-16 02:17 2024-11-10 Show GitHub Exploit DB Packet Storm