Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 8, 2025, 12:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189791 7.5 危険 my little homepage - my little forum の user.php における SQL インジェクションの脆弱性 - CVE-2007-2942 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
189792 7.5 危険 michael brandon - vBulletin の vBGSiteMap の作成元における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2941 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
189793 6.8 警告 mazens php chat - Mazen's PHP Chat における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2939 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
189794 10 危険 マイクロソフト
Honeywell International Inc.
- Ademco ATNBaseLoader100.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-2938 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
189795 7.5 危険 phil-a-form - Joomla! 用の philaform コンポーネントにおける SQL インジェクションの脆弱性 - CVE-2007-2933 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
189796 9.3 危険 Novell - Novell exteNd Director などの launch メソッドにおける任意のコマンドを実行される脆弱性 - CVE-2007-2923 2012-09-25 16:47 2007-06-18 Show GitHub Exploit DB Packet Storm
189797 6.8 警告 Logitech - Logitech VideoCall の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2918 2012-09-25 16:47 2007-05-31 Show GitHub Exploit DB Packet Storm
189798 5 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin における削除済みユーザの違反 "red flag" を発見される脆弱性 - CVE-2007-2912 2012-09-25 16:47 2007-02-13 Show GitHub Exploit DB Packet Storm
189799 8.5 危険 vBulletin Solutions, Inc. - Jelsoft vBulletin の admincp/attachment.php における SQL インジェクションの脆弱性 - CVE-2007-2911 2012-09-25 16:47 2007-03-19 Show GitHub Exploit DB Packet Storm
189800 4.3 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-2910 2012-09-25 16:47 2007-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 8, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows SQL Injection.This issue affects eDoc Easy Tables: … New CWE-89
SQL Injection
CVE-2025-22519 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
52 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KentoThemes Justified Image Gallery allows Stored XSS.This issue affects Justified Image Gallery:… New CWE-79
Cross-site Scripting
CVE-2025-22518 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
53 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ben Huson List Pages at Depth allows Stored XSS.This issue affects List Pages at Depth: from n/a … New CWE-79
Cross-site Scripting
CVE-2025-22517 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
54 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Patel Metadata SEO allows Stored XSS.This issue affects Metadata SEO: from n/a through 2.3. New CWE-79
Cross-site Scripting
CVE-2025-22516 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
55 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simon Chuang Show Google Analytics widget allows Stored XSS.This issue affects Show Google Analyt… New CWE-79
Cross-site Scripting
CVE-2025-22515 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
56 - - - Missing Authorization vulnerability in Sprout Apps Help Scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Help Scout: from n/a through 6.5.1. New CWE-862
 Missing Authorization
CVE-2025-22512 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
57 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ella van Durpe Slides & Presentations allows Stored XSS.This issue affects Slides & Presentations… New CWE-79
Cross-site Scripting
CVE-2025-22511 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
58 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Benjamin Santalucia (ben@woow-fr.com) WPMU Prefill Post allows SQL Injection.This issue affects W… New CWE-89
SQL Injection
CVE-2025-22507 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
59 - - - Cross-Site Request Forgery (CSRF) vulnerability in Digital Zoom Studio Admin debug wordpress – enable debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: … New CWE-352
 Origin Validation Error
CVE-2025-22503 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
60 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mindvalley MindValley Super PageMash allows SQL Injection.This issue affects MindValley Super Pag… New CWE-89
SQL Injection
CVE-2025-22502 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm