Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194101 6.8 警告 activecalendar - ActiveCalendar におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1111 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194102 5 警告 activecalendar - ActiveCalendar の data/showcode.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1110 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194103 6.8 警告 cs-gallery - Christian Schneider CS-Gallery の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1108 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194104 7.5 危険 Coppermine Photo Gallery - CPG の thumbnails.php における SQL インジェクションの脆弱性 - CVE-2007-1107 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194105 5 警告 extreme phpbb - Extreme phpBB の functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1105 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194106 7.6 危険 Google - Google Desktop におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1085 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194107 7.1 危険 ftpx - FTP Explorer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-1082 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194108 7.5 危険 flashgamescript - FlashGameScript の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1078 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194109 7.5 危険 design4online - Design4Online UserPages の page.asp における SQL インジェクションの脆弱性 - CVE-2007-1077 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194110 9.3 危険 dji - NewsBin Pro におけるバッファオーバーフローの脆弱性 - CVE-2007-1074 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 5:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1501 9.8 CRITICAL
Network 		wpmanageninja fluent_support Missing Authorization vulnerability in WPManageNinja LLC Fluent Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through 1.8… CWE-862
 Missing Authorization 		CVE-2024-47302 2024-11-13 05:40 2024-11-2 Show GitHub Exploit DB Packet Storm
1502 9.8 CRITICAL
Network 		kraftplugins wheel_of_life Missing Authorization vulnerability in Kraft Plugins Wheel of Life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through 1.1.8. CWE-862
 Missing Authorization 		CVE-2024-47311 2024-11-13 05:35 2024-11-2 Show GitHub Exploit DB Packet Storm
1503 9.8 CRITICAL
Network 		templately templately Missing Authorization vulnerability in Templately allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Templately: from n/a through 3.1.2. CWE-862
 Missing Authorization 		CVE-2024-47308 2024-11-13 05:35 2024-11-2 Show GitHub Exploit DB Packet Storm
1504 - - - A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read… - CVE-2024-23149 2024-11-13 05:35 2024-06-25 Show GitHub Exploit DB Packet Storm
1505 - - - A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controlled JavaScript within a WebView. The impact was further escalated by triggering … - CVE-2023-51219 2024-11-13 05:35 2024-06-4 Show GitHub Exploit DB Packet Storm
1506 - - - HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. U… - CVE-2024-24795 2024-11-13 05:35 2024-04-5 Show GitHub Exploit DB Packet Storm
1507 - - - Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable… - CVE-2024-21021 2024-11-13 05:35 2024-04-17 Show GitHub Exploit DB Packet Storm
1508 - - - Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this by tricking a victim applicatio… - CVE-2024-26311 2024-11-13 05:35 2024-02-22 Show GitHub Exploit DB Packet Storm
1509 - - - The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profi… - CVE-2024-1556 2024-11-13 05:35 2024-02-20 Show GitHub Exploit DB Packet Storm
1510 8.8 HIGH
Network 		sunshinephotocart sunshine_photo_cart Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through… CWE-862
 Missing Authorization 		CVE-2024-47314 2024-11-13 05:34 2024-11-2 Show GitHub Exploit DB Packet Storm