Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 9, 2024, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188931 4.3 警告 dacian strain
Joomla!		 - Joomla! 用の JFaq コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2514 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188932 7.5 危険 2daybiz - 2daybiz Matrimonial Script の customprofile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2512 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188933 7.5 危険 2daybiz - 2daybiz MLM Software の viewnews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2511 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188934 7.5 危険 2daybiz - 2daybiz Web Template Software の customize.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2510 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188935 4.3 警告 2daybiz - 2daybiz Web Template Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2509 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188936 7.5 危険 2daybiz - 2daybiz Video Community Portal Script の user-profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2508 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188937 2.9 注意 シスコシステムズ - Linksys WAP54Gv3 の debug.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2506 2012-06-26 16:19 2010-06-28 Show GitHub Exploit DB Packet Storm
188938 5 警告 bogofilter - bogofilter の base64.c の base64 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-2494 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
188939 7.5 危険 2daybiz - 2daybiz Video Community Portal Script の video.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2459 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
188940 4.3 警告 2daybiz - 2daybiz Video Community Portal Script の video.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2458 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 9, 2024, 6:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311 - - - A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The … New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-10999 2024-11-8 17:15 2024-11-8 Show GitHub Exploit DB Packet Storm
312 - - - A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/process_category_add.php. The … New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-10998 2024-11-8 17:15 2024-11-8 Show GitHub Exploit DB Packet Storm
313 - - - A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /book_list.php. The manipulation of t… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-10997 2024-11-8 16:15 2024-11-8 Show GitHub Exploit DB Packet Storm
314 - - - A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/process_category_edit.php. The manipula… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-10996 2024-11-8 16:15 2024-11-8 Show GitHub Exploit DB Packet Storm
315 - - - A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipul… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-10995 2024-11-8 16:15 2024-11-8 Show GitHub Exploit DB Packet Storm
316 6.4 MEDIUM
Network 		- - The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 3.7 due to insufficient input sanitization a… New - CVE-2024-10269 2024-11-8 16:15 2024-11-8 Show GitHub Exploit DB Packet Storm
317 7.4 HIGH
Network 		- - A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames… New CWE-287
Improper Authentication 		CVE-2024-10963 2024-11-8 16:15 2024-11-8 Show GitHub Exploit DB Packet Storm
318 - - - In the Linux kernel, the following vulnerability has been resolved: udf: refactor inode_bmap() to handle error Refactor inode_bmap() to handle error since udf_next_aext() can return error now. On s… New - CVE-2024-50211 2024-11-8 15:15 2024-11-8 Show GitHub Exploit DB Packet Storm
319 - - - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init The loop responsible for allocating up to MTK_FQ_DMA_LENGTH … New - CVE-2024-50206 2024-11-8 15:15 2024-11-8 Show GitHub Exploit DB Packet Storm
320 - - - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ring_buffer_subbuf_order_set() updates each ring_… New - CVE-2024-50207 2024-11-8 15:15 2024-11-8 Show GitHub Exploit DB Packet Storm