Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 14, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189301 7.5 危険 eZ - eZ Publish における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2672 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
189302 4.3 警告 eZ - eZ Publish の advancedsearch.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2671 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
189303 7.5 危険 BrotherScripts - BrotherScripts Recipe Website の recipedetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2670 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
189304 6.4 警告 adaptivedisplays - Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-2668 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
189305 7.8 危険 DELL EMC (旧 EMC Corporation) - EDL におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2633 2012-06-26 16:19 2010-08-2 Show GitHub Exploit DB Packet Storm
189306 7.5 危険 シスコシステムズ - Cisco CSS 11500 および ACE 4710 における意図したヘッダ挿入を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2629 2012-06-26 16:19 2010-07-6 Show GitHub Exploit DB Packet Storm
189307 6.8 警告 ea - Battlefield の Refractor エンジンにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2627 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
189308 4.3 警告 grafik-power - Grafik CMS の admin/admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2615 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
189309 7.5 危険 grafik-power - Grafik CMS の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2614 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
189310 7.5 危険 2daybiz - 2daybiz Job Site Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2610 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 15, 2024, 6:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 - - - The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsern… New - CVE-2024-45876 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
292 - - - The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in /Apps/TOPqw/BenutzerManagement.aspx/SaveNewUser, is vulnerable to SQL injection. The JSON object userna… New - CVE-2024-45875 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
293 - - - Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access. New - CVE-2024-41167 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
294 - - - Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access. New CWE-416
 Use After Free 		CVE-2024-40885 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
295 - - - Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access. New CWE-20
 Improper Input Validation  		CVE-2024-39811 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
296 - - - Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of pri… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2024-39766 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
297 - - - Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access. New CWE-284
Improper Access Control 		CVE-2024-39609 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
298 - - - Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially ena… New CWE-89
SQL Injection 		CVE-2024-39368 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
299 - - - Improper access control in UEFI firmware in some Intel(R) Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access. New CWE-284
Improper Access Control 		CVE-2024-39285 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm
300 - - - Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege v… New CWE-427
 Uncontrolled Search Path Element 		CVE-2024-38668 2024-11-14 06:15 2024-11-14 Show GitHub Exploit DB Packet Storm