Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194061 4.3 警告 マイクロソフト
アドビシステムズ		 - Adobe JRun および ColdFusion MX の IIS コネクタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2007-1278 2012-06-26 15:46 2007-03-13 Show GitHub Exploit DB Packet Storm
194062 5 警告 GNU Project - GNUMail におけるメッセージの内容を偽造される脆弱性 - CVE-2007-1269 2012-06-26 15:46 2007-03-5 Show GitHub Exploit DB Packet Storm
194063 5 警告 GNOME Project - Evolution におけるメッセージの内容を偽造される脆弱性 - CVE-2007-1266 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
194064 5 警告 The Enigmail Project - Enigmail における検出されずにメッセージのコンテンツを偽造する脆弱性 - CVE-2007-1264 2012-06-26 15:46 2007-03-6 Show GitHub Exploit DB Packet Storm
194065 6 警告 connectix - Connectix Boards の admin.bbcode.php における任意の PHP コードを実行される脆弱性 - CVE-2007-1255 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
194066 6.5 警告 connectix - Connectix Boards の part.userprofile.php における SQL インジェクションの脆弱性 - CVE-2007-1254 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
194067 9.3 危険 blender - kmz_ImportWithMesh.py Script for Blender における任意のPython コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1253 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
194068 7.5 危険 angel learning - LMS の section/default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1250 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
194069 6.8 警告 contelligent - C1 Financial Services Contelligent の MoveSortedContentAction におけるコンポーネントを並べ替えられる脆弱性 CWE-362
競合状態 		CVE-2007-1249 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
194070 4.3 警告 built2go - built2go News Manager Blog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1248 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1511 8.8 HIGH
Network 		wpquads ads Missing Authorization vulnerability in WP Quads Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads by W… CWE-862
 Missing Authorization 		CVE-2024-47317 2024-11-13 05:33 2024-11-2 Show GitHub Exploit DB Packet Storm
1512 8.8 HIGH
Network 		magazine3 pwa_for_wp_\&_amp Missing Authorization vulnerability in Magazine3 PWA for WP & AMP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PWA for WP & AMP: from n/a through 1.7.72. CWE-862
 Missing Authorization 		CVE-2024-47318 2024-11-13 05:32 2024-11-2 Show GitHub Exploit DB Packet Storm
1513 9.8 CRITICAL
Network 		androidbubbles wp_datepicker Missing Authorization vulnerability in Fahad Mahmood WP Datepicker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Datepicker: from n/a through 2.1.1. CWE-862
 Missing Authorization 		CVE-2024-47321 2024-11-13 05:29 2024-11-2 Show GitHub Exploit DB Packet Storm
1514 9.8 CRITICAL
Network 		code-atlantic popup_maker Missing Authorization vulnerability in Popup Maker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Popup Maker: from n/a through 1.19.2. CWE-862
 Missing Authorization 		CVE-2024-47358 2024-11-13 05:28 2024-11-2 Show GitHub Exploit DB Packet Storm
1515 9.8 CRITICAL
Network 		depicter depicter Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a… CWE-862
 Missing Authorization 		CVE-2024-47359 2024-11-13 05:26 2024-11-2 Show GitHub Exploit DB Packet Storm
1516 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases mad_agent_priv lo… NVD-CWE-noinfo
CVE-2024-50095 2024-11-13 05:26 2024-11-6 Show GitHub Exploit DB Packet Storm
1517 8.8 HIGH
Network 		webtechstreet elementor_addon_elements Missing Authorization vulnerability in WPVibes Elementor Addon Elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Addon Elements: from n/a t… CWE-862
 Missing Authorization 		CVE-2024-47361 2024-11-13 05:25 2024-11-2 Show GitHub Exploit DB Packet Storm
1518 7.5 HIGH
Network 		dena h2o h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based ac… CWE-290
 Authentication Bypass by Spoofing 		CVE-2024-45397 2024-11-13 05:14 2024-10-12 Show GitHub Exploit DB Packet Storm
1519 7.5 HIGH
Network 		dena quicly Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure tha… CWE-617
 Reachable Assertion 		CVE-2024-45396 2024-11-13 05:05 2024-10-12 Show GitHub Exploit DB Packet Storm
1520 4.3 MEDIUM
Network 		dena h2o h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The con… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2024-25622 2024-11-13 05:04 2024-10-12 Show GitHub Exploit DB Packet Storm