Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 25, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197241 7.5 危険 bjsintay - sitex における任意の PHP コードをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1235 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
197242 4.3 警告 bjsintay - sitex におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1234 2012-06-26 15:46 2007-03-3 Show GitHub Exploit DB Packet Storm
197243 10 危険 grok developments - Grok Developments NetProxy の接続ログファイル実装における不正な活動を実行される脆弱性 - CVE-2007-1225 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
197244 5 警告 grok developments - Grok Developments NetProxy における URL フィルタを回避される脆弱性 - CVE-2007-1224 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
197245 7.5 危険 admin phorum - Phorum の actions/del.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1219 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
197246 4.3 警告 アドビシステムズ - Adobe Reader および Acrobat Trial における任意のファイルを読まれる脆弱性 - CVE-2007-1199 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
197247 9.3 危険 epiware - Epiware における詳細不明な脆弱性 - CVE-2007-1197 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
197248 9.3 危険 シトリックス・システムズ - Citrix Presentation Server Client における任意のコードを実行される脆弱性 - CVE-2007-1196 2012-06-26 15:46 2007-02-28 Show GitHub Exploit DB Packet Storm
197249 7.5 危険 dxmsoft - XM Easy Personal FTP Server におけるバッファオーバーフローの脆弱性 - CVE-2007-1195 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
197250 6.8 警告 bsalsa - EmbeddedWB Web Browser ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2007-1190 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 26, 2024, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 - - - A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the '… Update - CVE-2024-55239 2024-12-25 12:15 2024-12-19 Show GitHub Exploit DB Packet Storm
32 6.7 MEDIUM
Local 		- - In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents sett… New - CVE-2022-21505 2024-12-25 04:15 2024-12-25 Show GitHub Exploit DB Packet Storm
33 - - - Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.… New - CVE-2019-2483 2024-12-25 04:15 2024-12-25 Show GitHub Exploit DB Packet Storm
34 - - - A SQL injection in the Amazon Redshift ODBC Driver v2.1.5.0 (Windows or Linux) allows a user to gain escalated privileges via the SQLTables or SQLColumns Metadata APIs. Users are recommended to upgra… New - CVE-2024-12746 2024-12-25 02:15 2024-12-25 Show GitHub Exploit DB Packet Storm
35 - - - A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgra… New - CVE-2024-12745 2024-12-25 02:15 2024-12-25 Show GitHub Exploit DB Packet Storm
36 - - - A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driv… New - CVE-2024-12744 2024-12-25 02:15 2024-12-25 Show GitHub Exploit DB Packet Storm
37 - - - systeminformation is a System and OS information library for node.js. In affected versions SSIDs are not sanitized when before they are passed as a parameter to cmd.exe in the `getWindowsIEEE8021x` f… Update - CVE-2024-56334 2024-12-25 02:15 2024-12-21 Show GitHub Exploit DB Packet Storm
38 - - - A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword … Update - CVE-2024-12842 2024-12-25 02:15 2024-12-21 Show GitHub Exploit DB Packet Storm
39 - - - Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1. New - CVE-2024-55947 2024-12-25 01:15 2024-12-24 Show GitHub Exploit DB Packet Storm
40 - - - A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Co… New - CVE-2024-12897 2024-12-25 01:15 2024-12-23 Show GitHub Exploit DB Packet Storm