Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 30, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189241 4.3 警告 elvinbts - Elvin の close_bug.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2126 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
189242 4 警告 elvinbts - Elvin の delete_bug.php における任意のバグを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2125 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
189243 7.5 危険 elvinbts - Elvin の page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2124 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
189244 7.5 危険 elvinbts - Elvin における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2123 2012-06-26 16:10 2009-06-19 Show GitHub Exploit DB Packet Storm
189245 4.3 警告 F5 Networks - F5 FirePass SSL VPN のログインインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2119 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
189246 7.5 危険 daan sprenkels - FretsWeb における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2113 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
189247 7.5 危険 frank-karau - phpFK の include/page_bottom.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2112 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
189248 5 警告 daan sprenkels - FretsWeb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2109 2012-06-26 16:10 2009-06-18 Show GitHub Exploit DB Packet Storm
189249 7.5 危険 com jumi
Joomla!		 - Joomla の jumi コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2102 2012-06-26 16:10 2009-06-17 Show GitHub Exploit DB Packet Storm
189250 6.8 警告 castro xl - TorrentVolve の archive.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2101 2012-06-26 16:10 2009-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 30, 2024, 8:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 - - - An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file. Update - CVE-2024-48655 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
112 - - - A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An att… Update - CVE-2024-48459 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
113 - - - OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with… Update - CVE-2022-30361 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
114 - - - OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone parameters. Authentic… Update - CVE-2022-30360 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
115 - - - OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList. Authentication is required. The information disclosed is associated with th… Update - CVE-2022-30359 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
116 - - - OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required. Update - CVE-2022-30358 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
117 - - - OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OE_ADM… Update - CVE-2022-30356 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
118 - - - A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inv… Update - CVE-2024-48426 2024-10-30 05:35 2024-10-25 Show GitHub Exploit DB Packet Storm
119 - - - Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys Update - CVE-2023-32189 2024-10-30 05:35 2024-10-16 Show GitHub Exploit DB Packet Storm
120 4.3 MEDIUM
Network 		google chrome Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via… Update NVD-CWE-noinfo
CVE-2024-7978 2024-10-30 05:35 2024-08-22 Show GitHub Exploit DB Packet Storm