Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194161 7.5 危険 agermenu - AgerMenu の examples/inc/top.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0837 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194162 4 警告 Coppermine Photo Gallery - Coppermine Photo Gallery の admin.php における任意のローカルファイルをインクルードされる脆弱性 - CVE-2007-0836 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194163 6.5 警告 Coppermine Photo Gallery - Coppermine Photo Gallery の admin.php における任意のシェルコマンドを実行される脆弱性 - CVE-2007-0835 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194164 6.8 警告 darrens 5-dollar script archive - FlashChat におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0834 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194165 4.4 警告 AVAST Software s.r.o. - avast! Server Edition における認証要件が回避される脆弱性 - CVE-2007-0829 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194166 6.8 警告 alibaba - Alibaba Alipay の PTA.DLL における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2007-0827 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194167 7.8 危険 FlashFXP - FlashFXP におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0825 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194168 5 警告 cedric - Cedric CLAIRE PortailPhp におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0821 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194169 7.5 危険 cedric - Cedric CLAIRE PortailPhp における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0820 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
194170 5 警告 CA Technologies - CA BrightStor ARCserve Backup の RPC Server サービスにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0816 2012-06-26 15:46 2007-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 4:17 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 - - - Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to re… New - CVE-2024-51164 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
252 - - - KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp. New - CVE-2024-50724 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
253 - - - A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. New - CVE-2024-50652 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
254 - - - java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. New - CVE-2024-50651 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
255 - - - python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. New - CVE-2024-50650 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
256 - - - The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. New - CVE-2024-50649 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
257 - - - yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files. New - CVE-2024-50648 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
258 - - - The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/in… New - CVE-2024-50647 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
259 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can edit the Display Name of a device, the application did not properly sanitize the user input in the… New - CVE-2024-50355 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm
260 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Services" section of the Device Overview page allows authenticate… New CWE-79
Cross-site Scripting 		CVE-2024-50352 2024-11-16 01:15 2024-11-16 Show GitHub Exploit DB Packet Storm