Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194091 7.5 危険 dbscripts - DBImageGallery における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1164 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194092 7.8 危険 common controls replacement project - CCRP BrowseDialog Server の ccrpbds6.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1162 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194093 4.3 警告 call-center-software - Call Center Software の call_entry.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1161 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194094 7.5 危険 CutePHP - CutePHP CuteNews における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1153 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194095 7.5 危険 delmaa.com - arabhost の function.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1146 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194096 5 警告 comscripts - J-Web Pics Navigator の jwpn-photos.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1144 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194097 9.4 危険 barekoncept - pheap の edit.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1140 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194098 10 危険 cromosoft - Cromosoft SPP における任意のスクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1139 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194099 5 警告 cromosoft - Cromosoft SPP の list_main_pages.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1138 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
194100 6.8 警告 efiction - eFiction における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1118 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 5:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the API-Access page allows authenticated users to inject arbitrary Jav… New CWE-79
Cross-site Scripting 		CVE-2024-49754 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
272 7.5 HIGH
Network 		- - IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request c… New CWE-32
CVE-2024-41784 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
273 - - - A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /adicionar-cliente.php. The manipulation of the argument nom… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2024-11246 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
274 - - - A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing of the file /editar-produto.php. The manipulation of the ar… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-11245 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
275 - - - A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-cliente.php. The manipulation of the argument id leads to s… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2024-11244 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
276 4.3 MEDIUM
Adjacent 		- - A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the aff… New CWE-125
Out-of-bounds Read 		CVE-2023-20094 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
277 4.4 MEDIUM
Local 		- - Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These… New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2023-20093 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
278 4.4 MEDIUM
Local 		- - Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These… New - CVE-2023-20092 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
279 6.7 MEDIUM
Local 		- - A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access c… New CWE-27
 Path Traversal: 'dir/../../filename' 		CVE-2023-20090 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
280 - - - A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data. This vulnerability is due to insufficient default file permissions that are applied to the appli… New - CVE-2023-20039 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm