Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191581 5 警告 openbiblio - OpenBiblio における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-6606 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
191582 5 警告 hotscripts - Hot or Not Clone における管理者ユーザ名およびパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6603 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
191583 7.5 危険 noserub - NoseRub の app/models/identity.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6602 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
191584 4.3 警告 OpenAFS - OpenAFS の fileserver におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2007-6599 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191585 4.3 警告 iportalx - IPortalX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6597 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
191586 4.3 警告 KDE project - KDE における偽造 Web サイトの無効な証明書をユーザが受領する脆弱性 CWE-DesignError
CVE-2007-6591 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
191587 4.3 警告 Mozilla Foundation - Mozilla Firefox などの jar プロトコルハンドラにおける XSS 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6589 2012-09-25 16:59 2007-11-26 Show GitHub Exploit DB Packet Storm
191588 7.5 危険 niclor - nicLOR-CMS の sezione_news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6586 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
191589 6.8 警告 nmnnewsletter - NmnNewsletter の confirmUnsubscription.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6585 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
191590 7.5 危険 ip reg - Ip Reg における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6579 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 5.3 MEDIUM
Network 		- - A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP Header Handler. The manipulation of the… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2025-0697 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1072 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacte… - CVE-2024-9499 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1073 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted inst… - CVE-2024-9498 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1074 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted in… - CVE-2024-9497 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1075 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted … - CVE-2024-9496 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1076 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted i… - CVE-2024-9495 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1077 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the  CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted … - CVE-2024-9494 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1078 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the  ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer. - CVE-2024-9493 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1079 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in Flash Programming Utility installer can lead to privilege escalation and arbitrary code execution when running the impacted ins… - CVE-2024-9492 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1080 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted instal… - CVE-2024-9491 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm