Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193141 4.3 警告 Apache Software Foundation - Apache Tomcat の cal2.jsp における任意のユーザとしてイベントを追加される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-4724 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193142 7.5 危険 jasio.net
Apache Software Foundation		 - Ragnarok Online Control Panel におけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-287
CVE-2007-4723 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193143 7.5 危険 212cafe - 212cafeBoard の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4719 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193144 5.1 警告 Claroline Consortium - Claroline の inc/lib/language.lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4718 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193145 3.5 注意 Claroline Consortium - Claroline におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4717 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193146 7.5 危険 enetman - eNetman の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4712 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193147 9.3 危険 アップル - Apple Mac OS X の Address Book におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2007-4708 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
193148 4 警告 Firebird Project - Firebird の Services API におけるサーバログ (firebird.log) を読まれる脆弱性 CWE-200
CWE-264
CVE-2007-4669 2012-06-26 15:54 2007-09-4 Show GitHub Exploit DB Packet Storm
193149 5 警告 Firebird Project - Firebird のサーバにおける任意のファイルの存在を特定される脆弱性 CWE-119
CWE-264
CVE-2007-4668 2012-06-26 15:54 2007-09-4 Show GitHub Exploit DB Packet Storm
193150 5 警告 Firebird Project - Firebird の Services API におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-4667 2012-06-26 15:54 2007-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 12:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 5.5 MEDIUM
Local 		- - Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to byp… CWE-125
Out-of-bounds Read 		CVE-2024-49527 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1282 7.8 HIGH
Local 		- - Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… CWE-416
 Use After Free 		CVE-2024-49526 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1283 7.7 HIGH
Network 		- - Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this… - CVE-2024-49521 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1284 7.8 HIGH
Local 		- - Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the curren… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2024-49514 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1285 - - - Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga… CWE-295
Improper Certificate Validation  		CVE-2024-49369 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1286 - - - HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which… - CVE-2024-30133 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1287 - - - Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code… - CVE-2024-11006 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1288 - - - Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code… - CVE-2024-11005 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1289 - - - Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction i… - CVE-2024-11004 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm
1290 - - - A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a f… - CVE-2024-10945 2024-11-14 02:01 2024-11-13 Show GitHub Exploit DB Packet Storm