Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 9.8 緊急
Network 		icontrolwp iControlWP icontrolwp の WordPress 用 iControlWP における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-13742 2025-01-31 17:40 2025-01-30 Show GitHub Exploit DB Packet Storm
2 5.4 警告
Network 		ilghera MailUp Auto Subscription ilghera の WordPress 用 MailUp Auto Subscription におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-13521 2025-01-31 17:37 2025-01-28 Show GitHub Exploit DB Packet Storm
3 6.5 警告
Network 		アップル visionos
Safari
iPadOS 		複数のアップル製品における脆弱性 CWE-noinfo
情報不足 		CVE-2025-24143 2025-01-31 17:31 2025-01-27 Show GitHub Exploit DB Packet Storm
4 5.5 警告
Local 		- アップルの macOS における脆弱性 CWE-noinfo
情報不足 		CVE-2025-24096 2025-01-31 17:29 2025-01-27 Show GitHub Exploit DB Packet Storm
5 5.5 警告
Local 		- アップルの macOS における脆弱性 CWE-noinfo
情報不足 		CVE-2024-54549 2025-01-31 17:27 2024-12-11 Show GitHub Exploit DB Packet Storm
6 8.8 重要
Network 		アップル watchOS
visionos
Safari
iPadOS
iOS
tvOS 		複数のアップル製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2024-54543 2025-01-31 17:26 2024-12-11 Show GitHub Exploit DB Packet Storm
7 9.1 緊急
Network 		アップル watchOS
iPadOS
iOS 		複数のアップル製品における脆弱性 CWE-noinfo
情報不足 		CVE-2024-54512 2025-01-31 17:23 2024-12-11 Show GitHub Exploit DB Packet Storm
8 5.5 警告
Local 		アップル iOS
visionos
iPadOS
watchOS
tvOS 		複数のアップル製品における脆弱性 CWE-noinfo
情報不足 		CVE-2025-24086 2025-01-31 17:21 2025-01-27 Show GitHub Exploit DB Packet Storm
9 6.7 警告
Local 		デル Latitude 5414 Rugged ファームウェア
Latitude 5280 ファームウェア
Embedded Box PC 5000 ファームウェア
Latitude 5400 ファームウェア
Latitude 3189 ファームウェ… 		複数のデル製品における脆弱性 CWE-20
CWE-noinfo
CVE-2024-22429 2025-01-31 16:37 2024-05-17 Show GitHub Exploit DB Packet Storm
10 5.4 警告
Network 		Philantro Inc. Philantro - Donations and Donor Management Philantro Inc. の WordPress 用 Philantro - Donations and Donor Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-13527 2025-01-31 16:37 2025-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274271 - smb4k smb4k Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to t… NVD-CWE-Other
CVE-2007-0475 2011-03-8 11:49 2007-02-4 Show GitHub Exploit DB Packet Storm
274272 - gentoo linux The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp secur… NVD-CWE-Other
CVE-2007-0476 2011-03-8 11:49 2007-01-25 Show GitHub Exploit DB Packet Storm
274273 - sky_gunning myspeach PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the my_ms[root] parameter, a different v… NVD-CWE-Other
CVE-2007-0491 2011-03-8 11:49 2007-01-25 Show GitHub Exploit DB Packet Storm
274274 - hitachi tpi_link
tpi_server_base 		Hitachi TP1/LiNK 05-00 through 05-03-/F, 03-04 through 03-06-/K, and 03-00 through 03-03-/H; and TP1/Server Base 05-00 through 05-00-/M, 03-01-E through 03-01-FD, 03-01 through 03-01-DB, and 05-03; a… NVD-CWE-Other
CVE-2007-0512 2011-03-8 11:49 2007-01-26 Show GitHub Exploit DB Packet Storm
274275 - hitachi cosminexus_application_server
cosminexus_application_server_version_5
cosminexus_developer_light_version_6
cosminexus_developer_professional_version_6
cosminexus_developer_standard_versio… 		Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML … NVD-CWE-Other
CVE-2007-0514 2011-03-8 11:49 2007-01-26 Show GitHub Exploit DB Packet Storm
274276 - novell access_manager_identity_server Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstan… NVD-CWE-Other
CVE-2007-0110 2011-03-8 11:48 2007-01-9 Show GitHub Exploit DB Packet Storm
274277 - apple mac_os_x
mac_os_x_server 		DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /L… NVD-CWE-Other
CVE-2007-0117 2011-03-8 11:48 2007-01-9 Show GitHub Exploit DB Packet Storm
274278 - igeneric ig_shop Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie param… NVD-CWE-Other
CVE-2007-0133 2011-03-8 11:48 2007-01-9 Show GitHub Exploit DB Packet Storm
274279 - hp openvms Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "uninte… NVD-CWE-Other
CVE-2007-0139 2011-03-8 11:48 2007-01-9 Show GitHub Exploit DB Packet Storm
274280 - cisco ip_contact_center_enterprise
ip_contact_center_hosted
unified_contact_center_enterprise
unified_contact_center_hosted 		The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 through 7.1 allows remote att… NVD-CWE-Other
CVE-2007-0198 2011-03-8 11:48 2007-01-11 Show GitHub Exploit DB Packet Storm