Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 17, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194131 10 危険 aktueldownload - Aktueldownload Haber スクリプトの HaberDetay.asp における SQL インジェクションの脆弱性 - CVE-2007-1015 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194132 4.3 警告 deskpro - DeskPRO の faq.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1012 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
194133 2.6 注意 アップル - Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1008 2012-06-26 15:46 2007-02-19 Show GitHub Exploit DB Packet Storm
194134 7.8 危険 CA Technologies - CA eTrust Intrusion Detection の SW3eng.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-1005 2012-06-26 15:46 2007-02-27 Show GitHub Exploit DB Packet Storm
194135 7.5 危険 aspcode.net - PollMentor の admin_poll.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0984 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
194136 6.8 警告 ansatheus - AT Contenator の _admin/nav.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0983 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
194137 10 危険 activex soft - ActSoft DVD-Tools ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-0976 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
194138 5 警告 apache stats - Ian Bezanson Apache Stats における重要な変数を上書きされる脆弱性 - CVE-2007-0975 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
194139 9 危険 シスコシステムズ - Cisco FWSM における特定の ACL 保護を回避される脆弱性 - CVE-2007-0968 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
194140 7.8 危険 シスコシステムズ - Cisco FWSM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0967 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2281 5.4 MEDIUM
Network 		spiffyplugins wp_flow_plus Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a th… CWE-79
Cross-site Scripting 		CVE-2024-49695 2024-11-9 00:20 2024-10-24 Show GitHub Exploit DB Packet Storm
2282 6.5 MEDIUM
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to missing authorization check on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter “u… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-51559 2024-11-9 00:19 2024-11-4 Show GitHub Exploit DB Packet Storm
2283 9.8 CRITICAL
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conduc… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-51558 2024-11-9 00:19 2024-11-4 Show GitHub Exploit DB Packet Storm
2284 6.5 MEDIUM
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP re… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-51557 2024-11-9 00:19 2024-11-4 Show GitHub Exploit DB Packet Storm
2285 5.4 MEDIUM
Network 		kraftplugins mega_elements Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a th… CWE-79
Cross-site Scripting 		CVE-2024-49693 2024-11-9 00:19 2024-10-24 Show GitHub Exploit DB Packet Storm
2286 7.5 HIGH
Network 		ruijie nbr3000d-e_firmware An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postgresql.conf component. NVD-CWE-noinfo
CVE-2024-48783 2024-11-9 00:19 2024-10-16 Show GitHub Exploit DB Packet Storm
2287 4.3 MEDIUM
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing… CWE-209
Information Exposure Through an Error Message 		CVE-2024-51560 2024-11-9 00:18 2024-11-4 Show GitHub Exploit DB Packet Storm
2288 6.1 MEDIUM
Network 		google_docs_rsvp_project google_docs_rsvp Cross-Site Request Forgery (CSRF) vulnerability in Gifford Cheung, Brian Watanabe, Chongsun Ahn Google Docs RSVP allows Stored XSS.This issue affects Google Docs RSVP: from n/a through 2.0.1. CWE-352
 Origin Validation Error 		CVE-2024-49672 2024-11-9 00:16 2024-10-29 Show GitHub Exploit DB Packet Storm
2289 4.6 MEDIUM
Physics 		tp-link tapo_h100_firmware This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-10523 2024-11-9 00:14 2024-11-4 Show GitHub Exploit DB Packet Storm
2290 8.8 HIGH
Network 		microsoft dataverse Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. NVD-CWE-noinfo
CVE-2024-38139 2024-11-9 00:14 2024-10-16 Show GitHub Exploit DB Packet Storm