Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 1, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189001 3.5 注意 日立 - Hitachi Groupmax Collaboration - Schedule における重要な情報を取得される脆弱性 - CVE-2007-4204 2012-09-25 16:59 2007-07-31 Show GitHub Exploit DB Packet Storm
189002 9.3 危険 Mambo Foundation - Mambo CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-4203 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
189003 4.3 警告 guidance software - Guidance Software EnCase におけるディスクイメージを偽造される脆弱性 - CVE-2007-4202 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
189004 4.3 警告 guidance software - Guidance Software EnCase におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4194 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
189005 4.3 警告 ide group - IDE Group の DRS の index.php におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4193 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
189006 7.5 危険 interspire - Interspire ArticleLive NX における脆弱性 - CVE-2007-4147 2012-09-25 16:59 2007-08-1 Show GitHub Exploit DB Packet Storm
189007 4.3 警告 mitridat - MitriDAT eMail Form Processor Pro におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4144 2012-09-25 16:59 2007-08-3 Show GitHub Exploit DB Packet Storm
189008 4.3 警告 IBM - IBM Lotus Sametime Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4142 2012-09-25 16:59 2007-08-3 Show GitHub Exploit DB Packet Storm
189009 4.3 警告 openrat - OpenRat CMS における重要な情報を取得される脆弱性 - CVE-2007-4141 2012-09-25 16:59 2007-08-3 Show GitHub Exploit DB Packet Storm
189010 6.8 警告 lfs - LFS におけるバッファオーバーフローの脆弱性 - CVE-2007-4140 2012-09-25 16:59 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 1, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 - - - AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first o… New CWE-59
Link Following 		CVE-2024-12754 2024-12-31 02:15 2024-12-31 Show GitHub Exploit DB Packet Storm
122 - - - TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. New - CVE-2024-50703 2024-12-31 01:15 2024-12-31 Show GitHub Exploit DB Packet Storm
123 - - - TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. New - CVE-2024-50702 2024-12-31 01:15 2024-12-31 Show GitHub Exploit DB Packet Storm
124 - - - TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. New - CVE-2024-50701 2024-12-31 01:15 2024-12-31 Show GitHub Exploit DB Packet Storm
125 - - - An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes. Update - CVE-2024-56522 2024-12-31 01:15 2024-12-27 Show GitHub Exploit DB Packet Storm
126 - - - A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/… Update - CVE-2024-12986 2024-12-31 00:15 2024-12-28 Show GitHub Exploit DB Packet Storm
127 - - - A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fn… Update - CVE-2024-12967 2024-12-31 00:15 2024-12-27 Show GitHub Exploit DB Packet Storm
128 7.2 HIGH
Network 		- - IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this… New CWE-78
OS Command  		CVE-2024-54181 2024-12-30 23:15 2024-12-30 Show GitHub Exploit DB Packet Storm
129 - - - A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in lm-sys/fastchat, as of commit e208d5677c6837d590b81cb03847c0… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-10044 2024-12-30 21:15 2024-12-30 Show GitHub Exploit DB Packet Storm
130 - - - Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without a… New - CVE-2024-12993 2024-12-30 20:15 2024-12-30 Show GitHub Exploit DB Packet Storm