Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194421 7.5 危険 francisco burzi - Francisco Burzi PHP-Nuke の blocks/block-Old_Articles.php における SQL インジェクションの脆弱性 - CVE-2007-0309 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
194422 7.5 危険 digiappz - Digiappz DigiAffiliate の visu_user.asp における SQL インジェクションの脆弱性 - CVE-2007-0306 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
194423 6.8 警告 fdweb - FdWeB Espace Membre の _admin/admin_menu.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0301 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
194424 7.1 危険 アップル - Mac OS X の byte_swap_sbin 関数における整数オーバーフローの脆弱性 - CVE-2007-0299 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
194425 6.8 警告 dexxaboy - LunarPoll の show.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0298 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
194426 6.6 警告 アップル
FreeBSD		 - Mac OS X および FreeBSD カーネルの ufs_lookup 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-0267 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
194427 7.5 危険 ezboxx - Ezboxx Portal System Beta の boxx/showAppendix.asp における SQL インジェクションの脆弱性 - CVE-2007-0266 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
194428 6.8 警告 ezboxx - Ezboxx Portal System におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0265 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
194429 7.8 危険 ezboxx - Ezboxx Portal System における重要な情報を取得される脆弱性 - CVE-2007-0259 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
194430 6.8 警告 OpenSolution
fastilo		 - Fastilo および Open Solution Quick.Cart の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0258 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 9.8 CRITICAL
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access… Update CWE-648
 Incorrect Use of Privileged APIs 		CVE-2024-11068 2024-11-16 03:24 2024-11-11 Show GitHub Exploit DB Packet Storm
212 7.5 HIGH
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's … Update CWE-23
 Relative Path Traversal 		CVE-2024-11067 2024-11-16 03:23 2024-11-11 Show GitHub Exploit DB Packet Storm
213 7.2 HIGH
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web p… Update CWE-78
OS Command  		CVE-2024-11066 2024-11-16 03:22 2024-11-11 Show GitHub Exploit DB Packet Storm
214 7.2 HIGH
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… Update CWE-78
OS Command  		CVE-2024-11065 2024-11-16 03:22 2024-11-11 Show GitHub Exploit DB Packet Storm
215 7.2 HIGH
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… Update CWE-78
OS Command  		CVE-2024-11064 2024-11-16 03:22 2024-11-11 Show GitHub Exploit DB Packet Storm
216 7.2 HIGH
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… Update CWE-78
OS Command  		CVE-2024-11063 2024-11-16 03:21 2024-11-11 Show GitHub Exploit DB Packet Storm
217 7.2 HIGH
Network 		dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… Update CWE-78
OS Command  		CVE-2024-11062 2024-11-16 03:21 2024-11-11 Show GitHub Exploit DB Packet Storm
218 - - - Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to loca… New CWE-59
CWE-281
CWE-61
Link Following
 Improper Preservation of Permissions
 UNIX Symbolic Link (Symlink) Following 		CVE-2024-52522 2024-11-16 03:15 2024-11-16 Show GitHub Exploit DB Packet Storm
219 - - - Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being blocked by the files access control, the user would still be able to copy the inter… New CWE-284
Improper Access Control 		CVE-2024-52514 2024-11-16 03:15 2024-11-16 Show GitHub Exploit DB Packet Storm
220 - - - Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share link a malicious user was able to download attachments that are referenced in Tex… New CWE-200
Information Exposure 		CVE-2024-52513 2024-11-16 03:15 2024-11-16 Show GitHub Exploit DB Packet Storm