Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193021 7.5 危険 Digium - Asterisk-Addons の cdr_addon_mysql における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5488 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
193022 6.3 警告 シスコシステムズ (Linksys)
Atheros		 - Atheros AR5416-AC1E チップセット上の Linksys WRT350N Wi-Fi アクセスポイントのドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5474 2012-06-26 15:54 2008-09-5 Show GitHub Exploit DB Packet Storm
193023 9.3 危険 JetAudio - COWON America jetAudio Basic におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5487 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
193024 6.4 警告 dotProject - dotProject における Companies モジュールにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5486 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
193025 5 警告 distributed checksum clearinghouse - DCC におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-5481 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
193026 4.3 警告 CA Technologies - CA HIPS の Server コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5472 2012-06-26 15:54 2007-10-18 Show GitHub Exploit DB Packet Storm
193027 5 警告 シスコシステムズ - Cisco CallManager における任意の電話番号への発信または発信者 ID を偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5468 2012-06-26 15:54 2007-10-15 Show GitHub Exploit DB Packet Storm
193028 10 危険 extremail - eXtremail における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-5467 2012-06-26 15:54 2007-10-15 Show GitHub Exploit DB Packet Storm
193029 10 危険 extremail - eXtremail におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5466 2012-06-26 15:54 2007-10-15 Show GitHub Exploit DB Packet Storm
193030 6.8 警告 alorys-hebergement - KwsPHP の newsletter モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5458 2012-06-26 15:54 2007-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 - - - Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. - CVE-2024-21976 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1282 - - - Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. - CVE-2024-21958 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1283 - - - Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. - CVE-2024-21957 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1284 - - - Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. - CVE-2024-21946 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1285 - - - Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. - CVE-2024-21945 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1286 - - - Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary … - CVE-2024-21939 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1287 - - - Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation… - CVE-2024-21938 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1288 - - - Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. - CVE-2024-21937 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1289 - - - A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg l… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-11138 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1290 - - - In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in wi… CWE-303
 Incorrect Implementation of Authentication Algorithm 		CVE-2024-9999 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm