Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193681 7.8 危険 bitscast - BitsCast におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2726 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193682 7.5 危険 db soft lab - DEWizardAX.ocx における任意のファイルを上書きされる脆弱性 - CVE-2007-2725 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193683 4.3 警告 fotolog - fotolog の all_photos.html におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2724 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193684 4.3 警告 Intermesh - Group-Office における重要な情報を取得される脆弱性 - CVE-2007-2720 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193685 6.8 警告 eqdkp - EQdkp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2716 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193686 7.5 危険 feindt computerservice - News-Script の newsadmin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2708 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193687 7.5 危険 Geeklog - Media Gallery の maint/ftpmedia.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2706 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193688 7.8 危険 BEAシステムズ - BEA WebLogic Integration の Test View Console におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2705 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
193689 3.6 注意 BEAシステムズ - BEA WebLogic Portal GA における特権を有するリソースへアクセスされる脆弱性 - CVE-2007-2703 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
193690 3.5 注意 BEAシステムズ - BEA WebLogic Portal GA の GroupSpace アプリケーションにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2702 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 5:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 - - - A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG… New - CVE-2024-10394 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
542 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support – WordPress Help Desk allows Upload a Web Shell to a Web Server.This issue affects Hive Support – WordPress … New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-52370 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
543 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Optimal Access Inc. KBucket allows Upload a Web Shell to a Web Server.This issue affects KBucket: from n/a through 4.1.6. New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-52369 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
544 - - - In lunary-ai/lunary version 1.2.7, there is a lack of rate limiting on the forgot password page, leading to an email bombing vulnerability. Attackers can exploit this by automating forgot password re… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-3760 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
545 - - - Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discovered in Giskard component by the GitHub Security Lab team. When processing datas… New - CVE-2024-52524 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
546 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in realmag777 WOLF allows Path Traversal.This issue affects WOLF: from n/a through 1.0.8.3. New CWE-22
Path Traversal 		CVE-2024-52396 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
547 - - - Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.15. New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2024-52393 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
548 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Sage AI Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation allows Upload a Web Shell to a Web Server.This issue a… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-52384 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
549 - - - Missing Authorization vulnerability in KCT Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… New - CVE-2024-52383 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
550 - - - Missing Authorization vulnerability in Medma Technologies Matix Popup Builder allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through 1.0.0. New CWE-862
 Missing Authorization 		CVE-2024-52382 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm