Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 9, 2024, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189291 5 警告 geopp - Geo++ GNCASTER の HTTP authentication 実装における他のユーザの認証ヘッダを読まれる脆弱性 CWE-200
情報漏えい
CVE-2010-0551 2012-06-26 16:19 2010-02-4 Show GitHub Exploit DB Packet Storm
189292 4 警告 geopp - Geo++ GNCASTER の admin.htm における HTTP Basic Authentication を使用される脆弱性 CWE-287
不適切な認証
CVE-2010-0550 2012-06-26 16:19 2010-02-4 Show GitHub Exploit DB Packet Storm
189293 5 警告 アップル
フリービット株式会社
- iPod touch の FreeBit ServersMan におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0496 2012-06-26 16:19 2010-02-3 Show GitHub Exploit DB Packet Storm
189294 7.5 危険 enanocms - Enano CMS のコメント登録インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0471 2012-06-26 16:19 2010-02-2 Show GitHub Exploit DB Packet Storm
189295 4.3 警告 comtrend - Comtrend CT-507IT ADSL ルータの scvrtsrv.cmd におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0470 2012-06-26 16:19 2010-02-2 Show GitHub Exploit DB Packet Storm
189296 7.5 危険 files2links - Files2Links F2L 3000 機器における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0469 2012-06-26 16:19 2010-02-2 Show GitHub Exploit DB Packet Storm
189297 5 警告 Chill Creations
Joomla!
- Joomla! の ccNewsletter コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0467 2012-06-26 16:19 2010-02-2 Show GitHub Exploit DB Packet Storm
189298 7.5 危険 a3malnet - magic-portal の home.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0457 2012-06-26 16:19 2010-01-28 Show GitHub Exploit DB Packet Storm
189299 7.5 危険 fabricadigital - Publique! の cgi/cgilua.exe/sys/start.htm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0454 2012-06-26 16:19 2010-01-28 Show GitHub Exploit DB Packet Storm
189300 5 警告 Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0441 2012-06-26 16:19 2010-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 9, 2024, 6:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 8.8 HIGH
Network
ibm watson_studio_local IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Update CWE-352
 Origin Validation Error
CVE-2024-49340 2024-11-9 00:06 2024-10-16 Show GitHub Exploit DB Packet Storm
262 4.6 MEDIUM
Network
apache nifi Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenti… Update CWE-79
Cross-site Scripting
CVE-2024-45477 2024-11-9 00:03 2024-10-29 Show GitHub Exploit DB Packet Storm
263 7.2 HIGH
Network
davidlingren media_library_assistant Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media Library Assistant allows Command Injection.This issue affects Media Lib… Update CWE-78
OS Command 
CVE-2024-51661 2024-11-9 00:02 2024-11-4 Show GitHub Exploit DB Packet Storm
264 4.6 MEDIUM
Network
mattermost mattermost_server Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to sanitize user inputs in the frontend that are used for redirection which allows for a one-click client-side path travers… Update CWE-352
 Origin Validation Error
CVE-2024-46872 2024-11-9 00:00 2024-10-29 Show GitHub Exploit DB Packet Storm
265 6.1 MEDIUM
Network
latex2html latex2html Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Van Abel LaTeX2HTML allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through 2… Update CWE-79
Cross-site Scripting
CVE-2024-49673 2024-11-8 23:57 2024-10-29 Show GitHub Exploit DB Packet Storm
266 6.1 MEDIUM
Network
samglover client_power_tools Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sam Glover Client Power Tools Portal allows Reflected XSS.This issue affects Client Power … Update CWE-79
Cross-site Scripting
CVE-2024-49670 2024-11-8 23:57 2024-10-29 Show GitHub Exploit DB Packet Storm
267 5.4 MEDIUM
Network
affiliatexblocks affiliatex Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AffiliateX allows Stored XSS.This issue affects AffiliateX: from n/a through 1.2.9. Update CWE-79
Cross-site Scripting
CVE-2024-49692 2024-11-8 23:55 2024-10-29 Show GitHub Exploit DB Packet Storm
268 5.4 MEDIUM
Network
brainstormforce astra_widgets Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets allows Stored XSS.This issue affects Astra Widgets: from n/… Update CWE-79
Cross-site Scripting
CVE-2024-50439 2024-11-8 23:53 2024-10-29 Show GitHub Exploit DB Packet Storm
269 5.4 MEDIUM
Network
wpkoi wpkoi_templates_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPKoi WPKoi Templates for Elementor allows Stored XSS.This issue affects WPKoi Templates f… Update CWE-79
Cross-site Scripting
CVE-2024-49679 2024-11-8 23:52 2024-10-29 Show GitHub Exploit DB Packet Storm
270 6.1 MEDIUM
Network
themoyles church_admin Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a bef… Update CWE-79
Cross-site Scripting
CVE-2024-50438 2024-11-8 23:52 2024-10-29 Show GitHub Exploit DB Packet Storm