Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 8, 2024, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188881 7.5 危険 2daybiz - 2daybiz Custom T-Shirt Design Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2691 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
188882 7.5 危険 customerparadigm - Customer Paradigm PageDirector CMS における管理権限を持つユーザを追加される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2685 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
188883 7.5 危険 customerparadigm - Customer Paradigm PageDirector CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2684 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
188884 7.5 危険 customerparadigm - Customer Paradigm PageDirector CMS の result.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2683 2012-06-26 16:19 2010-07-12 Show GitHub Exploit DB Packet Storm
188885 4.3 警告 alanzard - TSOKA:CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2675 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
188886 7.5 危険 alanzard - TSOKA:CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2674 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
188887 7.5 危険 devana - Devana の profile_view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2673 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
188888 7.5 危険 eZ - eZ Publish における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2672 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
188889 4.3 警告 eZ - eZ Publish の advancedsearch.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2671 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
188890 7.5 危険 BrotherScripts - BrotherScripts Recipe Website の recipedetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2670 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 8, 2024, 6:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 - - - In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed … Update - CVE-2024-20047 2024-11-8 02:35 2024-04-1 Show GitHub Exploit DB Packet Storm
172 - - - Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbit… Update - CVE-2024-29216 2024-11-8 02:35 2024-03-25 Show GitHub Exploit DB Packet Storm
173 6.1 MEDIUM
Network 		- - Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable… Update - CVE-2024-21036 2024-11-8 02:35 2024-04-17 Show GitHub Exploit DB Packet Storm
174 - - - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf ("iommu: Add support to change default domain of an iomm… Update - CVE-2021-47140 2024-11-8 02:35 2024-03-25 Show GitHub Exploit DB Packet Storm
175 - - - Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can uploa… Update - CVE-2023-39933 2024-11-8 02:35 2024-03-18 Show GitHub Exploit DB Packet Storm
176 - - - Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed. Update - CVE-2024-24097 2024-11-8 02:35 2024-03-13 Show GitHub Exploit DB Packet Storm
177 - - - Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be … Update - CVE-2024-24964 2024-11-8 02:35 2024-03-12 Show GitHub Exploit DB Packet Storm
178 - - - Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to confi… Update - CVE-2024-28160 2024-11-8 02:35 2024-03-7 Show GitHub Exploit DB Packet Storm
179 - - - The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf… Update - CVE-2024-24786 2024-11-8 02:35 2024-03-6 Show GitHub Exploit DB Packet Storm
180 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed Abort the walk of coalesced MMIO zones if kvm_io_bus_unregiste… Update - CVE-2021-47060 2024-11-8 02:35 2024-03-1 Show GitHub Exploit DB Packet Storm