Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193961 6.8 警告 atmail pty ltd - Atmail の atmail.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2153 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
193962 7.8 危険 bluearc - BlueArc Titan デバイスの BlueArc-FTPD における他のサイトへトラフィックをリダイレクトする脆弱性 - CVE-2007-2150 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
193963 7.5 危険 bonoestente - Joomla! の Be2004-2 テンプレートの index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2143 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
193964 7.5 危険 ajportal2php - AjPortal2Php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2142 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
193965 7.5 危険 franklin huang - Franklin Huang Flip の everything.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2140 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
193966 10 危険 CA Technologies - 複数の CA 製品で使用される CA BrightStor ARCserve Media Server の SUN RPC サービスにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2139 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
193967 7.5 危険 BMC Software - BMC Patrol PerformAgent の bgs_sdservice.exe におけるバッファオーバーフローの脆弱性 - CVE-2007-2136 2012-06-26 15:46 2007-04-22 Show GitHub Exploit DB Packet Storm
193968 10 危険 fac guestbook - FAC Guestbook におけるデータベースをダウンロードされる脆弱性 - CVE-2007-2101 2012-06-26 15:46 2007-04-18 Show GitHub Exploit DB Packet Storm
193969 10 危険 fac guestbook - FAC Guestbook におけるデータベースをダウンロードされる脆弱性 - CVE-2007-2100 2012-06-26 15:46 2007-04-18 Show GitHub Exploit DB Packet Storm
193970 7.5 危険 anthologia - Anthologia の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2094 2012-06-26 15:46 2007-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 - - - Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to re… New - CVE-2024-51164 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
322 - - - KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp. New - CVE-2024-50724 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
323 - - - A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. New - CVE-2024-50652 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
324 - - - java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. New - CVE-2024-50651 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
325 - - - python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. New - CVE-2024-50650 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
326 - - - The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. New - CVE-2024-50649 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
327 - - - yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files. New - CVE-2024-50648 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
328 - - - The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/in… New - CVE-2024-50647 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
329 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can edit the Display Name of a device, the application did not properly sanitize the user input in the… New - CVE-2024-50355 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
330 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Services" section of the Device Overview page allows authenticate… New CWE-79
Cross-site Scripting 		CVE-2024-50352 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm