Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194441 7.5 危険 FON - FON La Fonera ルータにおけるトラフィックをトンネリングされる脆弱性 - CVE-2007-0193 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194442 7.5 危険 edit-x - edit-x ecommerce の edit_address.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0190 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194443 6.5 警告 F5 Networks - F5 FirePass における FirePass 管理コンソールなどのネットワークリソースに接続される脆弱性 - CVE-2007-0188 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194444 7.5 危険 F5 Networks - F5 FirePass における制限された URL にアクセスされる脆弱性 - CVE-2007-0187 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194445 6.8 警告 F5 Networks - F5 FirePass SSL VPN におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0186 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194446 5 警告 Direct Web Remoting - Getahead DWR におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0185 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194447 7.5 危険 Direct Web Remoting - Getahead DWR における公開メソッドへの不正なアクセス権を取得される脆弱性 - CVE-2007-0184 2012-06-26 15:45 2007-01-12 Show GitHub Exploit DB Packet Storm
194448 7.6 危険 ef software - EF Commander におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-0180 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
194449 6.8 警告 GForge Group - GForge の search/advanced_search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0176 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
194450 4.3 警告 b2evolution - b2evolution の htsrv/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-0175 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 7.8 HIGH
Local 		amd ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. Update NVD-CWE-noinfo
CVE-2024-21974 2024-11-16 04:20 2024-11-13 Show GitHub Exploit DB Packet Storm
192 5.5 MEDIUM
Local 		amd ryzen_ai_software Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash. Update NVD-CWE-noinfo
CVE-2024-21949 2024-11-16 04:20 2024-11-13 Show GitHub Exploit DB Packet Storm
193 - - - An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via Inter-process communication (IPC) mechanism between Cura application and CuraEngine proces… New - CVE-2024-51330 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
194 - - - An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function. New - CVE-2024-51037 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
195 - - - GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17. New CWE-89
SQL Injection 		CVE-2024-45608 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
196 - - - GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.1… New CWE-79
Cross-site Scripting 		CVE-2024-43418 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
197 - - - GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Sof… New CWE-79
Cross-site Scripting 		CVE-2024-43417 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
198 - - - GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability from the ticket form. Upgrade to 10.0.17. New CWE-89
SQL Injection 		CVE-2024-41679 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
199 - - - An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContextSetupResponse message sent to the AMF. New - CVE-2024-24446 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm
200 - - - A reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet with a zero-length EMM message length. New - CVE-2024-24431 2024-11-16 04:15 2024-11-16 Show GitHub Exploit DB Packet Storm