Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 12:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194041 10 危険 afflib - AFFLIB におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2053 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
194042 5 警告 The BFTPD Project - bftpd の parsecmd 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-2051 2012-06-26 15:46 2007-04-16 Show GitHub Exploit DB Packet Storm
194043 7.5 危険 antonis ventouris - Mambo の Antonis Ventouris Weather モジュールの mod_weather.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2044 2012-06-26 15:46 2007-04-16 Show GitHub Exploit DB Packet Storm
194044 7.5 危険 avant-garde solutions - Mambo の mosmedia における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2043 2012-06-26 15:46 2007-04-16 Show GitHub Exploit DB Packet Storm
194045 6.8 警告 avant-garde solutions - Mambo の Avant-Garde Solutions MOSMedia Lite および初期モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2042 2012-06-26 15:46 2007-04-16 Show GitHub Exploit DB Packet Storm
194046 4 警告 シスコシステムズ - Cisco WLC におけるアクセス制限を回避される脆弱性 - CVE-2007-2041 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
194047 6.2 警告 シスコシステムズ - Cisco Aironet におけるデバイス上で任意の操作を実行される脆弱性 - CVE-2007-2040 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
194048 6.1 警告 シスコシステムズ - Cisco WLC のNPU におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2039 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
194049 6.1 警告 シスコシステムズ - Cisco WLC の NPU におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2038 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
194050 2.9 注意 シスコシステムズ - Cisco WLC におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2037 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 1:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2561 8.8 HIGH
Adjacent 		axis a1001_firmware Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP commu… CWE-787
 Out-of-bounds Write 		CVE-2023-21406 2024-11-8 18:15 2023-07-25 Show GitHub Exploit DB Packet Storm
2562 5.3 MEDIUM
Network 		axis axis_os AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to comp… CWE-311
Missing Encryption of Sensitive Data 		CVE-2023-21404 2024-11-8 18:15 2023-05-9 Show GitHub Exploit DB Packet Storm
2563 7.8 HIGH
Local 		axis ip_utility AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working director… CWE-427
 Uncontrolled Search Path Element 		CVE-2022-23410 2024-11-8 18:15 2022-02-15 Show GitHub Exploit DB Packet Storm
2564 8.8 HIGH
Network 		axis axis_os_2020
axis_os_2018
axis_os_2016
axis_os 		A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary S… CWE-74
Injection 		CVE-2021-31988 2024-11-8 18:15 2021-10-6 Show GitHub Exploit DB Packet Storm
2565 7.5 HIGH
Network 		axis axis_os_2020
axis_os_2018
axis_os_2016
axis_os 		A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients. NVD-CWE-Other
CVE-2021-31987 2024-11-8 18:15 2021-10-6 Show GitHub Exploit DB Packet Storm
2566 6.8 MEDIUM
Network 		axis axis_os_2020
axis_os_2018
axis_os_2016
axis_os 		User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. CWE-787
 Out-of-bounds Write 		CVE-2021-31986 2024-11-8 18:15 2021-10-6 Show GitHub Exploit DB Packet Storm
2567 8.8 HIGH
Network 		axis m3024-lve_firmware
m3025-ve_firmware
m7014_firmware
m7016_firmware
p1214-e_firmware
p7214_firmware
p7216_firmware
q7401_firmware
q7404_firmware
q7414_firmware
q7424-r_mk… 		Brandon Rothel from QED Secure Solutions has found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be explo… CWE-94
Code Injection 		CVE-2023-5677 2024-11-8 18:15 2024-02-5 Show GitHub Exploit DB Packet Storm
2568 7.1 HIGH
Network 		axis axis_os_2018
axis_os
axis_os_2022
axis_os_2020 		Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploi… CWE-22
Path Traversal 		CVE-2023-21418 2024-11-8 18:15 2023-11-21 Show GitHub Exploit DB Packet Storm
2569 7.1 HIGH
Network 		axis axis_os
axis_os_2022
axis_os_2020 		Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw c… CWE-22
Path Traversal 		CVE-2023-21417 2024-11-8 18:15 2023-11-21 Show GitHub Exploit DB Packet Storm
2570 5.3 MEDIUM
Network 		axis device_manager A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The mem… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2021-31989 2024-11-8 18:15 2021-08-26 Show GitHub Exploit DB Packet Storm