Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194121 4.6 警告 Comodo - Comodo Firewall Pro におけるセキュリティ保護を回避される脆弱性 - CVE-2007-1051 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194122 4.3 警告 abledesign - AbleDesign MyCalendar の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1050 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194123 7.5 危険 distributed checksum clearinghouse - DCC における /var/dcc/maps 配下の hosts を削除される脆弱性 - CVE-2007-1047 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194124 5 警告 dem trac - Dem_trac におけるログファイルの内容を読み取られる脆弱性 - CVE-2007-1046 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194125 7.5 危険 ezboo - Ezboo webstats における認証を回避される脆弱性 - CVE-2007-1043 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194126 7.5 危険 Drupal - Drupal 用の Mediafield などのモジュールで使用される getID3 の特定のデモスクリプトにおける任意のファイルを削除される脆弱性 - CVE-2007-1035 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
194127 7.5 危険 Drupal - Drupal 用の Secure site モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2007-1033 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
194128 6.8 警告 barry jaspan - Drupal の Barry Jaspan Image Pager におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1028 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
194129 6.8 警告 cedstat - CedStat の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1020 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194130 7.5 危険 aktueldownload - Aktueldownload Haber スクリプトにおける SQL インジェクションの脆弱性 - CVE-2007-1016 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 4:17 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 5.4 MEDIUM
Network 		- - A vulnerability in the web management interface of Cisco BroadWorks Hosted Thin Receptionist could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against … New CWE-79
Cross-site Scripting 		CVE-2022-20948 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
282 4.3 MEDIUM
Network 		- - A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vul… New CWE-922
 Insecure Storage of Sensitive Information 		CVE-2022-20939 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
283 6.5 MEDIUM
Adjacent 		- - A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the soft… New CWE-527
 Exposure of Version-Control Repository to an Unauthorized Control Sphere 		CVE-2022-20931 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
284 6.3 MEDIUM
Network 		- - A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote … New CWE-78
OS Command  		CVE-2022-20871 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
285 7.4 HIGH
Network 		- - A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack o… New CWE-352
 Origin Validation Error 		CVE-2022-20853 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
286 6.1 MEDIUM
Adjacent 		- - A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to contin… New CWE-391
CVE-2022-20849 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
287 6.0 MEDIUM
Local 		- - A vulnerability in the TL1 function of Cisco Network Convergence System (NCS) 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This vulnerabil… New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2022-20845 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
288 7.4 HIGH
Network 		- - A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.… New CWE-295
Improper Certificate Validation  		CVE-2022-20814 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
289 6.8 MEDIUM
Network 		- - A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitima… New CWE-325
 Missing Required Cryptographic Step 		CVE-2022-20793 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
290 5.3 MEDIUM
Network 		- - A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS cond… New CWE-125
Out-of-bounds Read 		CVE-2022-20766 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm