Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 15, 2024, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194081 7.5 危険 admin phorum - Phorum の actions/del.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1219 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194082 4.3 警告 アドビシステムズ - Adobe Reader および Acrobat Trial における任意のファイルを読まれる脆弱性 - CVE-2007-1199 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194083 9.3 危険 epiware - Epiware における詳細不明な脆弱性 - CVE-2007-1197 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194084 9.3 危険 シトリックス・システムズ - Citrix Presentation Server Client における任意のコードを実行される脆弱性 - CVE-2007-1196 2012-06-26 15:46 2007-02-28 Show GitHub Exploit DB Packet Storm
194085 7.5 危険 dxmsoft - XM Easy Personal FTP Server におけるバッファオーバーフローの脆弱性 - CVE-2007-1195 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194086 6.8 警告 bsalsa - EmbeddedWB Web Browser ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2007-1190 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194087 7.2 危険 bell labs - Alcatel-Lucent Bell Labs Plan カーネルの envwrite 関数における整数オーバーフローの脆弱性 - CVE-2007-1189 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194088 10 危険 シマンテック
numara
centennial		 - XFERWAN.EXE におけるバッファオーバーフローの脆弱性 - CVE-2007-1173 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
194089 5 警告 deV!L'z Clanportal - DZCP の inc/filebrowser/browser.php における MySQL データを取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-1167 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194090 7.5 危険 dbscripts - DBGuestbook における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1165 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 5:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 4.9 MEDIUM
Network 		- - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This… New CWE-20
 Improper Input Validation  		CVE-2021-1470 2024-11-16 02:35 2024-11-16 Show GitHub Exploit DB Packet Storm
52 7.8 HIGH
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit … Update CWE-77
Command Injection 		CVE-2024-49560 2024-11-16 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
53 7.8 HIGH
Local 		dell smartfabric_os10 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti… Update NVD-CWE-noinfo
CVE-2024-49558 2024-11-16 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
54 8.8 HIGH
Network 		anisha job_recruitment A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulat… New CWE-89
SQL Injection 		CVE-2024-11127 2024-11-16 02:29 2024-11-13 Show GitHub Exploit DB Packet Storm
55 7.5 HIGH
Network 		eclipse mosquitto In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "U… Update CWE-416
CWE-401
CWE-755
 Use After Free
 Missing Release of Memory after Effective Lifetime
 Improper Handling of Exceptional Conditions 		CVE-2024-8376 2024-11-16 02:21 2024-10-12 Show GitHub Exploit DB Packet Storm
56 5.4 MEDIUM
Network 		nicheaddons sales_page_addon Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Sales Page Addon – Elementor & Beaver Builder allows Stored XSS.This issue aff… Update CWE-79
Cross-site Scripting 		CVE-2024-51585 2024-11-16 02:17 2024-11-10 Show GitHub Exploit DB Packet Storm
57 5.4 MEDIUM
Network 		modernaweb black_widgets_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black W… Update CWE-79
Cross-site Scripting 		CVE-2024-51662 2024-11-16 02:16 2024-11-9 Show GitHub Exploit DB Packet Storm
58 - - - Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens,… New CWE-285
Improper Authorization 		CVE-2024-52528 2024-11-16 02:15 2024-11-16 Show GitHub Exploit DB Packet Storm
59 - - - Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. The session data is encrypted before being saved i… New CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-52525 2024-11-16 02:15 2024-11-16 Show GitHub Exploit DB Packet Storm
60 - - - Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely bein… New CWE-328
 Use of Weak Hash 		CVE-2024-52521 2024-11-16 02:15 2024-11-16 Show GitHub Exploit DB Packet Storm