Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194451 7.5 危険 FreeWebshop - FreeWebShop の includes/login.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0531 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
194452 9 危険 centrality communications - Centrality Communications A168 チップセットが実装する admin Web コンソールにおける重要な情報 (パスワードおよび設定データ) を取得される脆弱性 - CVE-2007-0528 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
194453 4.3 警告 Bitweaver - Bitweaver におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0526 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
194454 7.5 危険 grigoriadis - Nickolas Grigoriadis MiniWebsvr におけるバッファオーバーフローの脆弱性 - CVE-2007-0525 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
194455 10 危険 awffull - AWFFull の graphs.c におけるバッファオーバーフローの脆弱性 - CVE-2007-0510 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
194456 7.5 危険 bbclone - BBClone の lib/selectlang.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0508 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
194457 6 警告 Drupal - Drupal 用の Acidfree モジュールにおける任意の SQL コマンドを実行される脆弱性 - CVE-2007-0507 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
194458 6 警告 Drupal - Drupal 用の Project issue tracking モジュールにおけるアクセスコントロールモジュールを回避される脆弱性 - CVE-2007-0506 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
194459 8.5 危険 Drupal - Drupal 用の Project issue tracking モジュールにおける任意のコードを実行される脆弱性 - CVE-2007-0505 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
194460 7.5 危険 bradabra - Bradabra の include/includes.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0500 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 1:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1651 - - - The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked through the comment_text filter in all versions up to and including 1.4.2. This … CWE-862
 Missing Authorization 		CVE-2024-9578 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1652 - - - The Aqua SVG Sprite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.14 due to insufficient input sanitization and outp… CWE-79
Cross-site Scripting 		CVE-2024-9426 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1653 6.4 MEDIUM
Network 		- - The Social Proof (Testimonial) Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spslider-block shortcode in all versions up to, and including, 2.2.4 due to in… CWE-79
Cross-site Scripting 		CVE-2024-8985 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1654 6.1 MEDIUM
Network 		- - The AJAX Login and Registration modal popup + inline form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL … CWE-79
Cross-site Scripting 		CVE-2024-8874 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1655 - - - Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achie… - CVE-2024-39712 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1656 - - - Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achie… - CVE-2024-39711 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1657 - - - Argument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve… - CVE-2024-39710 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1658 - - - Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy Secure before version 22.6R1 allow a local authenticated attacker to escalate their privileges. - CVE-2024-39709 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1659 - - - Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achie… - CVE-2024-38656 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm
1660 - - - Argument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote cod… - CVE-2024-38655 2024-11-13 11:15 2024-11-13 Show GitHub Exploit DB Packet Storm