Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193321 5 警告 dirlist - dirLIST の index.php における除外フォルダのコンテンツを一覧にされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3968 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193322 5 警告 dirlist - PHP dirLIST の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3967 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193323 7.5 危険 fsp - fsplib の fsplib.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3962 2012-06-26 15:54 2007-07-23 Show GitHub Exploit DB Packet Storm
193324 5 警告 fsp - fsplib の fsplib.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3961 2012-06-26 15:54 2007-07-23 Show GitHub Exploit DB Packet Storm
193325 9.3 危険 アップル - Apple Safari などの PCRE ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3944 2012-06-26 15:54 2007-07-23 Show GitHub Exploit DB Packet Storm
193326 7.5 危険 adaptive business design - Infinite Responder における SQL インジェクションの脆弱性 - CVE-2007-3943 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
193327 7.5 危険 a-shop - A-shop における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3937 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
193328 6.4 警告 a-shop - A-shop の admin/filebrowser.asp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3936 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
193329 7.5 危険 bbs - BBS E-Market の postscript/postscript.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3934 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
193330 7.8 危険 シスコシステムズ - Cisco WAE アプライアンスで使用される Cisco WAAS の CIFS の最適化におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3923 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2411 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: must hold reference on net namespace BUG: KASAN: slab-use-after-free in __nf_unregister_net_hook+0x640/0x6b0 Read… CWE-416
 Use After Free 		CVE-2024-50130 2024-11-8 06:49 2024-11-6 Show GitHub Exploit DB Packet Storm
2412 - - - An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory. - CVE-2024-35526 2024-11-8 06:35 2024-06-26 Show GitHub Exploit DB Packet Storm
2413 - - - TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules - CVE-2024-35400 2024-11-8 06:35 2024-05-29 Show GitHub Exploit DB Packet Storm
2414 - - - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of … - CVE-2024-27436 2024-11-8 06:35 2024-05-17 Show GitHub Exploit DB Packet Storm
2415 - - - In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf uninitialized in mt76_dma_tx_queue_skb_raw, its field skip_unmap could potentially … - CVE-2021-47064 2024-11-8 06:35 2024-03-1 Show GitHub Exploit DB Packet Storm
2416 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix MAX_TRACE_ARGS limit handling When creating a trace_probe we would set nr_args prior to truncating the argume… CWE-476
 NULL Pointer Dereference 		CVE-2024-50132 2024-11-8 06:32 2024-11-6 Show GitHub Exploit DB Packet Storm
2417 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: LoongArch: Don't crash in stack_top() for tasks without vDSO Not all tasks have a vDSO mapped, for example kthreads never do. If … CWE-476
 NULL Pointer Dereference 		CVE-2024-50133 2024-11-8 06:17 2024-11-6 Show GitHub Exploit DB Packet Storm
2418 4.8 MEDIUM
Network 		kevonadonis wp_abstracts Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-50411 2024-11-8 06:09 2024-10-29 Show GitHub Exploit DB Packet Storm
2419 6.1 MEDIUM
Network 		rafasashi todo_custom_field Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rafasashi Todo Custom Field allows Reflected XSS.This issue affects Todo Custom Field: fro… CWE-79
Cross-site Scripting 		CVE-2024-49642 2024-11-8 05:59 2024-10-29 Show GitHub Exploit DB Packet Storm
2420 5.4 MEDIUM
Network 		basticom framework The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and ou… CWE-79
Cross-site Scripting 		CVE-2024-9443 2024-11-8 05:56 2024-11-5 Show GitHub Exploit DB Packet Storm