Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189371 4.3 警告 Opera Software ASA - Opera におけるクロスドメインスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6520 2012-09-25 16:59 2007-12-24 Show GitHub Exploit DB Packet Storm
189372 4.9 警告 ヒューレット・パッカード - HP Tru64 UNIX のFFM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-6519 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
189373 4.3 警告 ヒューレット・パッカード - HP eSupportDiagnostics ActiveX コントロール における任意のレジストリ値を読まれる脆弱性 CWE-200
情報漏えい
CVE-2007-6513 2012-09-25 16:59 2007-12-21 Show GitHub Exploit DB Packet Storm
189374 5 警告 The PHP Group - PHP MySQL Banner Exchange におけるデータベース情報を取得される脆弱性 CWE-200
CWE-264
CVE-2007-6512 2012-09-25 16:59 2007-12-21 Show GitHub Exploit DB Packet Storm
189375 9.3 危険 ヒューレット・パッカード - HP Software Update の RulesEngine.dll における任意のファイルを破損される脆弱性 CWE-DesignError
CVE-2007-6506 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
189376 5.5 警告 hosting controller - Hosting Controller の IIS/iibind.asp における任意の hosts のヘッダーを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6504 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
189377 5.5 警告 hosting controller - Hosting Controller における任意のプランをインポートされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6503 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
189378 5.5 警告 hosting controller - Hosting Controller における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-6502 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
189379 5.5 警告 hosting controller - Hosting Controller における "支払方法" を有効または無効にされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6501 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
189380 4.9 警告 hosting controller - Hosting Controller における "ゲートウェイ情報" を削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6500 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
341 - - - A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadControl… New - CVE-2024-13191 2025-01-10 02:15 2025-01-9 Show GitHub Exploit DB Packet Storm
342 5.5 MEDIUM
Local
- - An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authen… New CWE-755
 Improper Handling of Exceptional Conditions
CVE-2025-21596 2025-01-10 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
343 6.5 MEDIUM
Adjacent
- - An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based att… New CWE-664
 Improper Control of a Resource Through its Lifetime
CVE-2025-21593 2025-01-10 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
344 5.5 MEDIUM
Local
- - An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Juniper Networks Junos OS on SRX Series devices allows a local, low-privileged user … New CWE-200
Information Exposure
CVE-2025-21592 2025-01-10 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
345 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joomag. WP Joomag allows DOM-Based XSS.This issue affects WP Joomag: from n/a through 2.5.2. New CWE-79
Cross-site Scripting
CVE-2025-22827 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
346 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpecommerce, wp.insider Sell Digital Downloads allows Stored XSS.This issue affects Sell Digital … New CWE-79
Cross-site Scripting
CVE-2025-22826 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
347 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lucia Intelisano Live Flight Radar allows Stored XSS.This issue affects Live Flight Radar: from n… New CWE-79
Cross-site Scripting
CVE-2025-22824 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
348 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Twerdy Genesis Style Shortcodes allows DOM-Based XSS.This issue affects Genesis Style Shor… New CWE-79
Cross-site Scripting
CVE-2025-22823 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
349 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bishawjit Das wp custom countdown allows Stored XSS.This issue affects wp custom countdown: from … New CWE-79
Cross-site Scripting
CVE-2025-22822 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
350 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vfthemes StorePress allows DOM-Based XSS.This issue affects StorePress: from n/a through 1.0.12. New CWE-79
Cross-site Scripting
CVE-2025-22821 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm