Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 7, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189121 7.5 危険 Fonality - Fonality Trixbox の cisco/services/PhonecDirectory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0702 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
189122 7.5 危険 dynamicsoft - Dynamicsoft WSC CMS の backoffice/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0698 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
189123 4.3 警告 Basic-CMS - BASIC-CMS の pages/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0695 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
189124 7.5 危険 commodityrentals - CommodityRentals Trade Manager Script の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0693 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
189125 7.5 危険 commodityrentals - CommodityRentals Video Games Rentals の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0690 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
189126 10 危険 DATEV - DATEV Base System の DVBSExeCall.ocx における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2010-0689 2012-06-26 16:19 2010-02-26 Show GitHub Exploit DB Packet Storm
189127 5 警告 Digium - Asterisk Open Source のダイアルプラン機能のデザインにおけるダイアルプランへ文字列を挿入される脆弱性 CWE-DesignError
CVE-2010-0685 2012-06-26 16:19 2010-02-10 Show GitHub Exploit DB Packet Storm
189128 3.5 注意 Apache Software Foundation - Apache ActiveMQ の createDestination.action におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0684 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
189129 4.3 警告 bgsvetionik - BGSvetionik BGS CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0675 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
189130 5 警告 2enetworx - StatCounteX におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0674 2012-06-26 16:19 2010-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 7, 2024, 4:18 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as b… New - CVE-2024-50115 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
282 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unregister redistributor for failed vCPU creation Alex reports that syzkaller has managed to trigger a use-after-free… New - CVE-2024-50114 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
283 - - - WebLaudos v20.8 (118) was discovered to contain a cross-site scripting (XSS) vulnerability via the login page. New - CVE-2024-48312 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
284 - - - The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication. New - CVE-2023-29126 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
285 - - - A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. New - CVE-2023-29125 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
286 - - - Under certain conditions, access to service libraries is granted to account they should not have access to. New - CVE-2023-29122 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
287 - - - Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. New - CVE-2023-29121 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
288 - - - In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 ("firewire: core: use helper functions for self… New - CVE-2024-50113 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
289 - - - In the Linux kernel, the following vulnerability has been resolved: x86/lam: Disable ADDRESS_MASKING in most cases Linear Address Masking (LAM) has a weakness related to transient execution as desc… New - CVE-2024-50112 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
290 - - - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context Unaligned access exception can be triggered in irq-enabled con… New - CVE-2024-50111 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm