Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 7, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189091 7.5 危険 geekhelps - Geekhelps ADMP の bannershow.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0968 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
189092 5.1 警告 geekhelps - Geekhelps ADMP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0967 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
189093 6.8 警告 deV!L'z Clanportal - DZCP の inc/config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-0966 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
189094 5 警告 アップル - Apple AirPort Express などの FTP プロキシサーバにおけるイントラネット FTP サーバから TCP 転送をされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0962 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
189095 7.5 危険 dev4u - dev4u CMS の go_target.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0951 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
189096 6.8 警告 bfs.kilu - Bigforum の profil.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0948 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
189097 4.3 警告 bbsmax - Max Network Technology BBSMAX の post.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0947 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
189098 4.3 警告 D-Link Systems, Inc. - D-LINK DKVM-IP8 の auth.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0936 2012-06-26 16:19 2010-03-8 Show GitHub Exploit DB Packet Storm
189099 5 警告 アップル
マイクロソフト
- Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0925 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
189100 5 警告 アップル
マイクロソフト
- Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0924 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 8, 2024, 6:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 - - - Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the security policy when the object is part of … New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2024-51754 2024-11-7 05:15 2024-11-7 Show GitHub Exploit DB Packet Storm
322 - - - Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file conte… New - CVE-2024-51751 2024-11-7 05:15 2024-11-7 Show GitHub Exploit DB Packet Storm
323 - - - A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_var… Update CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-8775 2024-11-7 05:15 2024-09-14 Show GitHub Exploit DB Packet Storm
324 - - - Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer. Update - CVE-2024-48463 2024-11-7 04:35 2024-11-5 Show GitHub Exploit DB Packet Storm
325 - - - An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, Mode… Update - CVE-2024-45185 2024-11-7 04:35 2024-11-5 Show GitHub Exploit DB Packet Storm
326 - - - This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, and 8.9.… Update - CVE-2024-21690 2024-11-7 04:35 2024-08-22 Show GitHub Exploit DB Packet Storm
327 - - - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order t… Update - CVE-2023-52870 2024-11-7 04:35 2024-05-22 Show GitHub Exploit DB Packet Storm
328 - - - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k… Update - CVE-2023-52800 2024-11-7 04:35 2024-05-22 Show GitHub Exploit DB Packet Storm
329 - - - In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field If driver read tmp value sufficient for (tmp… Update - CVE-2021-47384 2024-11-7 04:35 2024-05-22 Show GitHub Exploit DB Packet Storm
330 - - - A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker may be able to access user data. Update - CVE-2024-27816 2024-11-7 04:35 2024-05-15 Show GitHub Exploit DB Packet Storm