Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193501 6.8 警告 シトリックス・システムズ - Citrix Access Gateway Advanced Edition におけるフィッシング攻撃を実行される脆弱性 - CVE-2007-4018 2012-06-26 15:54 2007-07-19 Show GitHub Exploit DB Packet Storm
193502 7.6 危険 シトリックス・システムズ - Citrix Access Gateway の Web ベースの管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4017 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193503 6.8 警告 シトリックス・システムズ - Citrix Access Gateway Standard Edition および Advanced Edition のクライアントコンポーネントにおける任意のコードを実行される脆弱性 - CVE-2007-4016 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193504 9.3 危険 シトリックス・システムズ - Firefox プラグインディレクトリの Net6Helper.DLL における詳細不明な脆弱性 - CVE-2007-4013 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193505 7.1 危険 シスコシステムズ - Cisco 4100 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4012 2012-06-26 15:54 2007-07-24 Show GitHub Exploit DB Packet Storm
193506 7.1 危険 シスコシステムズ - Cisco 4100 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4011 2012-06-26 15:54 2007-07-24 Show GitHub Exploit DB Packet Storm
193507 7.5 危険 entertainment cms - Entertainment Media Sharing CMS の custom.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4008 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193508 9.3 危険 article directory - Article Directory の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4007 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193509 4.3 警告 ASP indir - Asp cvmatik の cv.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3991 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
193510 7.5 危険 ASP indir - Dora Emlak の default.asp における SQL インジェクションの脆弱性 - CVE-2007-3990 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 4:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2151 - - - Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confi… CWE-862
 Missing Authorization 		CVE-2024-42372 2024-11-12 10:15 2024-11-12 Show GitHub Exploit DB Packet Storm
2152 - - - A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName … CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-11096 2024-11-12 10:15 2024-11-12 Show GitHub Exploit DB Packet Storm
2153 5.5 MEDIUM
Network 		- - A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to… CWE-20
 Improper Input Validation  		CVE-2024-11079 2024-11-12 09:15 2024-11-12 Show GitHub Exploit DB Packet Storm
2154 - - - Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via connecting to the web administration server. Not existing fo… - CVE-2024-40117 2024-11-12 08:15 2024-07-27 Show GitHub Exploit DB Packet Storm
2155 - - - An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for S… - CVE-2024-40116 2024-11-12 08:15 2024-07-27 Show GitHub Exploit DB Packet Storm
2156 6.5 MEDIUM
Network 		bkw solar-log_500_firmware An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read b… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2021-34544 2024-11-12 08:15 2021-12-8 Show GitHub Exploit DB Packet Storm
2157 7.5 HIGH
Network 		bkw solar-log_500_firmware The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a… CWE-306
Missing Authentication for Critical Function 		CVE-2021-34543 2024-11-12 08:15 2021-12-8 Show GitHub Exploit DB Packet Storm
2158 5.4 MEDIUM
Network 		solar-log 2000_pm\+_firmware A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting … CWE-79
Cross-site Scripting 		CVE-2023-46344 2024-11-12 08:15 2024-02-2 Show GitHub Exploit DB Packet Storm
2159 9.8 CRITICAL
Network 		solar-log solar-log_250_firmware
solar-log_300_firmware
solar-log_500_firmware
solar-log_800e_firmware
solar-log_1000_firmware
solar-log_1000_pm\+_firmware
solar-log_1200_firmware
solar-lo… 		A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up… NVD-CWE-noinfo
CVE-2022-47767 2024-11-12 08:15 2023-01-27 Show GitHub Exploit DB Packet Storm
2160 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-9542. Reason: This candidate is a reservation duplicate of CVE-2024-9542. Notes: All CVE users should reference CV… - CVE-2024-10694 2024-11-12 06:15 2024-11-12 Show GitHub Exploit DB Packet Storm