Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 6, 2024, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189171 7.5 危険 CS-Cart - CS-Cart Beta の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4891 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
189172 7.5 危険 PHP-Fusion
basti2web
- PHP-Fusion の book_panel モジュールの books.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4889 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
189173 5 警告 bernhard frohlich - phpCommunity 2 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4886 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
189174 4.3 警告 bernhard frohlich - phpCommunity 2 の templates/1/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4885 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
189175 6.8 警告 bernhard frohlich - phpCommunity 2 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4884 2012-06-26 16:19 2010-06-11 Show GitHub Exploit DB Packet Storm
189176 5 警告 GNU Project - GNU C Library の strfmon 実装 における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-4881 2012-06-26 16:19 2010-06-1 Show GitHub Exploit DB Packet Storm
189177 5 警告 GNU Project - GNU C Library の strfmon 実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-4880 2012-06-26 16:19 2010-06-1 Show GitHub Exploit DB Packet Storm
189178 5 警告 frederico caldeira knabben - FCKeditor.Java におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4875 2012-06-26 16:19 2010-05-26 Show GitHub Exploit DB Packet Storm
189179 7.5 危険 abushhab - Alwasel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4862 2012-06-26 16:19 2010-05-11 Show GitHub Exploit DB Packet Storm
189180 7.5 危険 demarque - Typing Pal の demo.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4860 2012-06-26 16:19 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 6, 2024, 4:19 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use flexible array sizes, use flexibl… Update - CVE-2023-52819 2024-11-6 04:35 2024-05-22 Show GitHub Exploit DB Packet Storm
142 - - - SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component. Update - CVE-2024-26517 2024-11-6 04:35 2024-05-15 Show GitHub Exploit DB Packet Storm
143 - - - In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion was uninitialized for the user space file structure in the o… Update - CVE-2021-47096 2024-11-6 04:35 2024-03-5 Show GitHub Exploit DB Packet Storm
144 - - - Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-SS is a hardware feature designed to protect against Return… Update - CVE-2023-46841 2024-11-6 04:35 2024-03-20 Show GitHub Exploit DB Packet Storm
145 4.8 MEDIUM
Network
toshibatec
sharp
e-studio1058_firmware
e-studio1208_firmware
e-studio908_firmware
bp-90c70_firmware
bp-90c80_firmware
bp-70c65_firmware
bp-70c55_firmware
bp-70c45_firmware
bp-70c36_firmware
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, ma… Update CWE-79
Cross-site Scripting
CVE-2024-48870 2024-11-6 04:34 2024-10-25 Show GitHub Exploit DB Packet Storm
146 6.1 MEDIUM
Network
toshibatec
sharp
e-studio1058_firmware
e-studio1208_firmware
e-studio908_firmware
bp-90c70_firmware
bp-90c80_firmware
bp-70c65_firmware
bp-70c55_firmware
bp-70c45_firmware
bp-70c36_firmware
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected prod… Update CWE-79
Cross-site Scripting
CVE-2024-47801 2024-11-6 04:34 2024-10-25 Show GitHub Exploit DB Packet Storm
147 8.8 HIGH
Network
draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the modifyrow function. Update CWE-78
OS Command 
CVE-2024-51248 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm
148 8.8 HIGH
Network
draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPPo function. Update CWE-78
OS Command 
CVE-2024-51247 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm
149 8.8 HIGH
Network
draytek vigor3900_firmware In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the rename_table function. Update CWE-78
OS Command 
CVE-2024-51245 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm
150 8.8 HIGH
Network
draytek vigor3900_firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doIPSec function. Update CWE-78
OS Command 
CVE-2024-51244 2024-11-6 04:28 2024-11-2 Show GitHub Exploit DB Packet Storm