Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194041 3.5 注意 Drupal - Drupal 用の Project issue tracking モジュールにおけるプライベートノードのコンテンツを読み取られる脆弱性 - CVE-2007-1368 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
194042 4.3 警告 アバイア - Avaya CM のログインページにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1367 2012-06-26 15:46 2007-03-7 Show GitHub Exploit DB Packet Storm
194043 4.9 警告 Fabrice Bellard - QEMU における仮想マシンがクラッシュされる脆弱性 - CVE-2007-1366 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
194044 6.4 警告 dropafew - DropAFew における任意のユーザを作成される脆弱性 - CVE-2007-1364 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
194045 7.5 危険 dropafew - DropAFew における SQL インジェクションの脆弱性 - CVE-2007-1363 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
194046 6 警告 Drupal - Drupal 用の Nodefamily モジュールにおける他のユーザのプロファイルを変更する脆弱性 - CVE-2007-1360 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
194047 4.1 警告 CA Technologies - CA eTrust Admin 用の GINA コンポーネントの cube.exe における認証を回避される脆弱性 - CVE-2007-1345 2012-06-26 15:46 2007-03-8 Show GitHub Exploit DB Packet Storm
194048 7.5 危険 アップル - Apple AirPort Extreme の AirPort ユーティリティのデフォルト設定におけるアクセス制限を回避される脆弱性 - CVE-2007-1338 2012-06-26 15:46 2007-03-8 Show GitHub Exploit DB Packet Storm
194049 4.4 警告 Comodo - CFP における HKLM\SYSTEM\Software\Comodo\Personal Firewall レジストリキーに対するドライバ保護を回避される脆弱性 - CVE-2007-1330 2012-06-26 15:46 2007-03-7 Show GitHub Exploit DB Packet Storm
194050 4.3 警告 bernard joly - Bernard JOLY BJ Webring の formulaire.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1328 2012-06-26 15:46 2007-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 12:17 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 5.4 MEDIUM
Network 		snilesh business Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nilesh Shiragave Business allows Stored XSS.This issue affects Business: from n/a through … Update CWE-79
Cross-site Scripting 		CVE-2024-51596 2024-11-16 02:01 2024-11-10 Show GitHub Exploit DB Packet Storm
252 5.5 MEDIUM
Local 		lenovo dolby_vision_provisioning A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on t… Update CWE-276
Incorrect Default Permissions  		CVE-2024-5474 2024-11-16 02:00 2024-10-12 Show GitHub Exploit DB Packet Storm
253 9.1 CRITICAL
Network 		github enterprise_server An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning… Update CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-9487 2024-11-16 01:57 2024-10-11 Show GitHub Exploit DB Packet Storm
254 5.4 MEDIUM
Network 		russellalbin simple_business_manager Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Russell Albin Simple Business Manager allows Stored XSS.This issue affects Simple Business… Update CWE-79
Cross-site Scripting 		CVE-2024-51599 2024-11-16 01:55 2024-11-10 Show GitHub Exploit DB Packet Storm
255 7.5 HIGH
Network 		gradio_project gradio Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloaded FRP client, which could potentially allow attackers to in… Update NVD-CWE-Other
CVE-2024-47867 2024-11-16 01:44 2024-10-11 Show GitHub Exploit DB Packet Storm
256 9.8 CRITICAL
Network 		pedalo pedalo_connector The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. T… Update CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-9822 2024-11-16 01:41 2024-10-11 Show GitHub Exploit DB Packet Storm
257 - - - parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulne… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-5125 2024-11-16 01:35 2024-11-15 Show GitHub Exploit DB Packet Storm
258 7.8 HIGH
Local 		samsung android Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behavi… Update NVD-CWE-noinfo
CVE-2024-34662 2024-11-16 01:34 2024-10-8 Show GitHub Exploit DB Packet Storm
259 5.4 MEDIUM
Network 		seothemes display_terms_shortcode Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SEO Themes Display Terms Shortcode allows Stored XSS.This issue affects Display Terms Shor… Update CWE-79
Cross-site Scripting 		CVE-2024-51610 2024-11-16 01:32 2024-11-10 Show GitHub Exploit DB Packet Storm
260 5.4 MEDIUM
Network 		genoo genoo Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Genoo, LLC Genoo allows DOM-Based XSS.This issue affects Genoo: from n/a through 6.0.10. Update CWE-79
Cross-site Scripting 		CVE-2024-51605 2024-11-16 01:31 2024-11-10 Show GitHub Exploit DB Packet Storm