Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194161 7.5 危険 agermenu - AgerMenu の examples/inc/top.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0837 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194162 4 警告 Coppermine Photo Gallery - Coppermine Photo Gallery の admin.php における任意のローカルファイルをインクルードされる脆弱性 - CVE-2007-0836 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194163 6.5 警告 Coppermine Photo Gallery - Coppermine Photo Gallery の admin.php における任意のシェルコマンドを実行される脆弱性 - CVE-2007-0835 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194164 6.8 警告 darrens 5-dollar script archive - FlashChat におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0834 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194165 4.4 警告 AVAST Software s.r.o. - avast! Server Edition における認証要件が回避される脆弱性 - CVE-2007-0829 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194166 6.8 警告 alibaba - Alibaba Alipay の PTA.DLL における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2007-0827 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194167 7.8 危険 FlashFXP - FlashFXP におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0825 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194168 5 警告 cedric - Cedric CLAIRE PortailPhp におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0821 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194169 7.5 危険 cedric - Cedric CLAIRE PortailPhp における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0820 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194170 5 警告 CA Technologies - CA BrightStor ARCserve Backup の RPC Server サービスにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0816 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 4:17 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 - - - McAfee Trial Installer 16.0.53 has Incorrect Access Control that leads to Local Escalation of Privileges. New - CVE-2024-49592 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
92 8.8 HIGH
Local 		- - Azure Stack HCI Elevation of Privilege Vulnerability New CWE-798
 Use of Hard-coded Credentials 		CVE-2024-49060 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
93 - - - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control … New CWE-79
Cross-site Scripting 		CVE-2024-45611 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
94 - - - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link… New - CVE-2024-45610 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
95 - - - An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files. New - CVE-2024-44758 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
96 4.9 MEDIUM
Network 		- - A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options. New - CVE-2024-11217 2024-11-16 06:15 2024-11-16 Show GitHub Exploit DB Packet Storm
97 - - - Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This issue affects: ?Product Affected Versions LoadMaster Fro… Update CWE-20
 Improper Input Validation  		CVE-2024-8755 2024-11-16 06:15 2024-10-12 Show GitHub Exploit DB Packet Storm
98 5.5 MEDIUM
Local 		cysoft168 super_easy_enterprise_management_system An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server absolute path by entering a single quotation mark. Update CWE-22
Path Traversal 		CVE-2024-42680 2024-11-16 06:15 2024-08-15 Show GitHub Exploit DB Packet Storm
99 - - -  VMware Avi Load Balancer contains an information disclosure vulnerability. A malicious actor with access to the system logs can view cloud connection credentials in plaintext. Update - CVE-2024-22266 2024-11-16 05:35 2024-05-8 Show GitHub Exploit DB Packet Storm
100 - - - netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php. Update - CVE-2024-30872 2024-11-16 05:35 2024-04-1 Show GitHub Exploit DB Packet Storm