Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194021 7.5 危険 danny ho - OES における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1446 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194022 7.5 危険 betaparticle - BP Blog の default.asp 用の heme プレビュー機能における SQL インジェクションの脆弱性 - CVE-2007-1445 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194023 9.3 危険 bitesser - bitesser MySQL Commander の ressourcen/dbopen.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1439 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194024 10 危険 D-Link Systems, Inc. - D-Link TFTP Server におけるバッファオーバーフローの脆弱性 - CVE-2007-1435 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194025 7.5 危険 grayscale - Grayscale Blog における SQL インジェクションの脆弱性 - CVE-2007-1434 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194026 4.3 警告 grayscale - Grayscale Blog におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1433 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194027 7.5 危険 grayscale - Grayscale Blog における権限を取得される脆弱性 - CVE-2007-1432 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194028 7.5 危険 clip-share - ClipShare の include/adodb-connection.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1430 2012-06-26 15:46 2007-03-12 Show GitHub Exploit DB Packet Storm
194029 5 警告 assetman - AssetMan の download_pdf.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1427 2012-06-26 15:46 2007-03-12 Show GitHub Exploit DB Packet Storm
194030 7.8 危険 astrocam - AstroCam の Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1426 2012-06-26 15:46 2007-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Capture Debug Information" page allows authenticated users to inj… New CWE-79
Cross-site Scripting 		CVE-2024-49764 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
292 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Manage User Access" page allows authenticated users to inject arb… New CWE-79
Cross-site Scripting 		CVE-2024-49759 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
293 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can add Notes to a device, the application did not properly sanitize the user input, when the ExampleP… New CWE-79
Cross-site Scripting 		CVE-2024-49758 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
294 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the API-Access page allows authenticated users to inject arbitrary Jav… New CWE-79
Cross-site Scripting 		CVE-2024-49754 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
295 7.5 HIGH
Network 		- - IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request c… New CWE-32
CVE-2024-41784 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
296 - - - A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /adicionar-cliente.php. The manipulation of the argument nom… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2024-11246 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
297 - - - A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing of the file /editar-produto.php. The manipulation of the ar… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-11245 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
298 - - - A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-cliente.php. The manipulation of the argument id leads to s… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-11244 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
299 4.3 MEDIUM
Adjacent 		- - A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the aff… New CWE-125
Out-of-bounds Read 		CVE-2023-20094 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
300 4.4 MEDIUM
Local 		- - Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These… New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2023-20093 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm