Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194121 6.8 警告 cs-gallery - Christian Schneider CS-Gallery の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1108 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194122 7.5 危険 Coppermine Photo Gallery - CPG の thumbnails.php における SQL インジェクションの脆弱性 - CVE-2007-1107 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194123 5 警告 extreme phpbb - Extreme phpBB の functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1105 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
194124 7.6 危険 Google - Google Desktop におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1085 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194125 7.1 危険 ftpx - FTP Explorer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-1082 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194126 7.5 危険 flashgamescript - FlashGameScript の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1078 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194127 7.5 危険 design4online - Design4Online UserPages の page.asp における SQL インジェクションの脆弱性 - CVE-2007-1077 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194128 9.3 危険 dji - NewsBin Pro におけるバッファオーバーフローの脆弱性 - CVE-2007-1074 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
194129 7.2 危険 シスコシステムズ - Cisco Unified IP Phone 7906G におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1072 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194130 7.8 危険 アップル - Apple Mac OS X の gifGetBandProc 関数における整数オーバーフローの脆弱性 - CVE-2007-1071 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 12:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2341 8.1 HIGH
Network 		axis axis_os_2022
axis_os_2018
axis_os_2020
axis_os
axis_os_2016 		Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be explo… CWE-22
Path Traversal 		CVE-2023-21415 2024-11-8 18:15 2023-10-16 Show GitHub Exploit DB Packet Storm
2342 6.8 MEDIUM
Physics 		axis axis_os NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provid… NVD-CWE-noinfo
CVE-2023-21414 2024-11-8 18:15 2023-10-16 Show GitHub Exploit DB Packet Storm
2343 7.2 HIGH
Network 		axis axis_os GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS O… CWE-77
Command Injection 		CVE-2023-21413 2024-11-8 18:15 2023-10-16 Show GitHub Exploit DB Packet Storm
2344 8.8 HIGH
Network 		axis license_plate_verifier User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections. CWE-89
SQL Injection 		CVE-2023-21412 2024-11-8 18:15 2023-08-3 Show GitHub Exploit DB Packet Storm
2345 8.8 HIGH
Network 		axis license_plate_verifier User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution. NVD-CWE-noinfo
CVE-2023-21411 2024-11-8 18:15 2023-08-3 Show GitHub Exploit DB Packet Storm
2346 8.8 HIGH
Network 		axis license_plate_verifier User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution. NVD-CWE-noinfo
CVE-2023-21410 2024-11-8 18:15 2023-08-3 Show GitHub Exploit DB Packet Storm
2347 8.8 HIGH
Adjacent 		axis a1001_firmware Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP commu… CWE-787
 Out-of-bounds Write 		CVE-2023-21406 2024-11-8 18:15 2023-07-25 Show GitHub Exploit DB Packet Storm
2348 8.8 HIGH
Network 		axis m3024-lve_firmware
m3025-ve_firmware
m7014_firmware
m7016_firmware
p1214-e_firmware
p7214_firmware
p7216_firmware
q7401_firmware
q7404_firmware
q7414_firmware
q7424-r_mk… 		Brandon Rothel from QED Secure Solutions has found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be explo… CWE-94
Code Injection 		CVE-2023-5677 2024-11-8 18:15 2024-02-5 Show GitHub Exploit DB Packet Storm
2349 7.1 HIGH
Network 		axis axis_os_2018
axis_os
axis_os_2022
axis_os_2020 		Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploi… CWE-22
Path Traversal 		CVE-2023-21418 2024-11-8 18:15 2023-11-21 Show GitHub Exploit DB Packet Storm
2350 7.1 HIGH
Network 		axis axis_os
axis_os_2022
axis_os_2020 		Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw c… CWE-22
Path Traversal 		CVE-2023-21417 2024-11-8 18:15 2023-11-21 Show GitHub Exploit DB Packet Storm