Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 9, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189241 7.5 危険 php con - PHP_CON の Exchange/include.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6177 2012-09-25 16:59 2007-11-29 Show GitHub Exploit DB Packet Storm
189242 4.3 警告 Liferay - Liferay Enterprise Portal の c/portal/login におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6173 2012-09-25 16:59 2007-11-29 Show GitHub Exploit DB Packet Storm
189243 6.8 警告 iaprcommence - IAPR COMMENCE における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6147 2012-09-25 16:59 2007-11-27 Show GitHub Exploit DB Packet Storm
189244 6.8 警告 mp3 - Mp3 ToolBox の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6139 2012-09-25 16:59 2007-11-27 Show GitHub Exploit DB Packet Storm
189245 7.5 危険 p3mbo - Content Injector の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6137 2012-09-25 16:59 2007-11-27 Show GitHub Exploit DB Packet Storm
189246 4.3 警告 m2scripts - M2Scripts の MySpace Sctipts Poll Creator におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6136 2012-09-25 16:59 2007-11-27 Show GitHub Exploit DB Packet Storm
189247 10 危険 irc services - IRC Services における脆弱性 CWE-noinfo
情報不足 		CVE-2007-6123 2012-09-25 16:59 2007-11-26 Show GitHub Exploit DB Packet Storm
189248 5 警告 irc services - IRC Services の encrypt.c の default_encrypt 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6122 2012-09-25 16:59 2007-11-26 Show GitHub Exploit DB Packet Storm
189249 5 警告 ihu - IHU におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6103 2012-09-25 16:59 2007-11-23 Show GitHub Exploit DB Packet Storm
189250 10 危険 ingate - Ingate Firewall および SIParator における不正な操作を実施される脆弱性 CWE-DesignError
CVE-2007-6099 2012-09-25 16:59 2007-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 - - - RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially c… New CWE-190
CWE-122
 Integer Overflow or Wraparound
Heap-based Buffer Overflow 		CVE-2024-51480 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
252 4.8 MEDIUM
Network 		- - A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow an unauthenticated, remote attacker to intercept or manipulate metrics infor… New CWE-295
Improper Certificate Validation  		CVE-2025-20126 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
253 4.8 MEDIUM
Network 		- - Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks agains… New CWE-79
Cross-site Scripting 		CVE-2025-20123 2025-01-9 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
254 - - - The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against… New - CVE-2024-12585 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
255 - - - The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow us… New - CVE-2024-10151 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
256 - - - An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database. New - CVE-2022-45186 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
257 - - - A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows low-privileged users to mapping physical memory via specially crafted IOCTL requests . This can… New - CVE-2024-55414 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
258 - - - A vulnerability exits in driver snxppamd.sys in SUNIX Parallel Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This… New - CVE-2024-55413 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
259 - - - A vulnerability exits in driver snxpsamd.sys in SUNIX Serial Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This c… New - CVE-2024-55412 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
260 - - - File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality New - CVE-2024-50660 2025-01-9 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm