Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193251 6.4 警告 eyeOS Project - eyeOS における特定の不正な操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4609 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
193252 9.3 危険 quicksoft
gate comm software		 - Quiksoft EasyMail SMTP Object のEasyMailSMTPObj ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4607 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
193253 7.5 危険 dinkumsoft.com - DL PayCart の viewitem.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4604 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
193254 7.5 危険 altercoder - ACG News の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4603 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
193255 6.4 警告 entrust - Entrust ESP における証明書認証を偽装される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-4594 2012-06-26 15:54 2007-08-29 Show GitHub Exploit DB Packet Storm
193256 7.5 危険 2532gigs - 2532|Gig の activateuser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4585 2012-06-26 15:54 2007-08-28 Show GitHub Exploit DB Packet Storm
193257 10 危険 bitchx - BitchX におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4584 2012-06-26 15:54 2007-08-28 Show GitHub Exploit DB Packet Storm
193258 5 警告 ACTi Corporation - ACTi NVR の nvUtility.dll の nvUtility.Utility.1 ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4583 2012-06-26 15:54 2007-08-28 Show GitHub Exploit DB Packet Storm
193259 7.5 危険 ACTi Corporation - ACTi NVR の nvUnifiedControl.dll の nvUnifiedControl.AUnifiedControl.1 ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4582 2012-06-26 15:54 2007-08-28 Show GitHub Exploit DB Packet Storm
193260 10 危険 alpha centauri software - Alpha Centauri Software SIDVault LDAP サーバの login メカニズムにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4566 2012-06-26 15:54 2007-08-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
421 - - - Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form valid… - CVE-2024-52549 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
422 - - - The file upload function in the "QWKalkulation" tool of baltic-it TOPqw Webportal v1.35.287.1 (fixed in version 1.35.291), in /Apps/TOPqw/QWKalkulation/QWKalkulation.aspx, is vulnerable to Cross-Site… - CVE-2024-45879 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
423 - - - The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.291), in /Apps/TOPqw/qwStammdaten.aspx, is vulnerable to persistent Cross-Site Scripting (XSS). - CVE-2024-45878 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
424 - - - baltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incorrect Access Control in the User Management function in /Apps/TOPqw/BenutzerManagement.aspx. This allows a low privileged user to access all… - CVE-2024-45877 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
425 - - - The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsern… - CVE-2024-45876 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
426 - - - The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in /Apps/TOPqw/BenutzerManagement.aspx/SaveNewUser, is vulnerable to SQL injection. The JSON object userna… - CVE-2024-45875 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
427 - - - Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access. - CVE-2024-41167 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
428 - - - Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access. CWE-416
 Use After Free 		CVE-2024-40885 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
429 - - - Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access. CWE-20
 Improper Input Validation  		CVE-2024-39811 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
430 - - - Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of pri… CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2024-39766 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm