Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193321 7.5 危険 cartkeeper - CartKeeper CKGold Shopping Cart の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4736 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
193322 9.3 危険 Aztech Group Ltd - Aztech DSL600EU ルータにおける Web インターフェースに接続される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4733 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
193323 4.3 警告 Apache Software Foundation - Apache Tomcat の cal2.jsp における任意のユーザとしてイベントを追加される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-4724 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193324 7.5 危険 jasio.net
Apache Software Foundation		 - Ragnarok Online Control Panel におけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-287
CVE-2007-4723 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193325 7.5 危険 212cafe - 212cafeBoard の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4719 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193326 5.1 警告 Claroline Consortium - Claroline の inc/lib/language.lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4718 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193327 3.5 注意 Claroline Consortium - Claroline におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4717 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193328 7.5 危険 enetman - eNetman の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4712 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
193329 9.3 危険 アップル - Apple Mac OS X の Address Book におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2007-4708 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
193330 4 警告 Firebird Project - Firebird の Services API におけるサーバログ (firebird.log) を読まれる脆弱性 CWE-200
CWE-264
CVE-2007-4669 2012-06-26 15:54 2007-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 4:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
641 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args into a percpu buffer, and then copy to ring… Update CWE-787
 Out-of-bounds Write 		CVE-2024-50067 2024-11-18 00:15 2024-10-28 Show GitHub Exploit DB Packet Storm
642 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointer reference to amdgpu_bo_unref to clear the correct pointer,… Update CWE-416
 Use After Free 		CVE-2024-49991 2024-11-18 00:15 2024-10-22 Show GitHub Exploit DB Packet Storm
643 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors x86_android_tablet_remove() frees the … Update CWE-416
 Use After Free 		CVE-2024-49986 2024-11-18 00:15 2024-10-22 Show GitHub Exploit DB Packet Storm
644 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->n… Update - CVE-2024-26889 2024-11-18 00:15 2024-04-17 Show GitHub Exploit DB Packet Storm
645 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") … Update CWE-416
 Use After Free 		CVE-2021-47195 2024-11-18 00:15 2024-04-11 Show GitHub Exploit DB Packet Storm
646 7.0 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_release() dst_entries_add() uses per-cpu data that might be freed at netns dismantle f… Update NVD-CWE-noinfo
CVE-2024-50036 2024-11-18 00:15 2024-10-22 Show GitHub Exploit DB Packet Storm
647 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fill_super The del_timer_sync function can… Update CWE-416
 Use After Free 		CVE-2024-49960 2024-11-18 00:15 2024-10-22 Show GitHub Exploit DB Packet Storm
648 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot reported] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/… Update CWE-416
 Use After Free 		CVE-2024-49950 2024-11-18 00:15 2024-10-22 Show GitHub Exploit DB Packet Storm
649 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal m… Update CWE-459
 Incomplete Cleanup 		CVE-2024-47674 2024-11-18 00:15 2024-10-15 Show GitHub Exploit DB Packet Storm
650 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring: fix possible deadlock in io_register_iowq_max_workers() The io_register_iowq_max_workers() function calls io_put_sq_dat… Update CWE-667
 Improper Locking 		CVE-2024-41080 2024-11-18 00:15 2024-07-30 Show GitHub Exploit DB Packet Storm