Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191611 7.5 危険 hosting controller - Hosting Controller における任意のユーザプロファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6497 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191612 6.8 警告 hosting controller - Hosting Controller における任意のユーザを登録される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6496 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191613 6.5 警告 hosting controller - Hosting Controller の inc_newuser.asp におけるディレクトリ名 db のパーミッションを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6495 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191614 10 危険 hosting controller - Hosting Controller におけるログインアクセスを取得される脆弱性 CWE-20
不適切な入力確認
CVE-2007-6494 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191615 10 危険 imesh.com - iMesh の IMWeb.dll における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2007-6493 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191616 7.1 危険 imesh.com - iMesh の IMWeb.dll および IMWebControl.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-6492 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191617 10 危険 kvaliitti - Kvaliitti WebDoc CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6491 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
191618 9.3 危険 hammer of thyrion - Hammer of Thyrion の HuffDecode 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6468 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
191619 7.5 危険 mkportal - MKPortal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6467 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
191620 4.3 警告 php real estate script - PHP Real Estate Classifieds の管理パネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6463 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 - - - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in AyeCode Ltd Ketchup Shortcodes allows Stored XSS. This issue affects Ketchup Shortcodes: from n/a throug… CWE-80
Basic XSS
CVE-2025-24673 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
982 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodePeople Form Builder CP allows SQL Injection. This issue affects Form Builder CP: from n/a thr… CWE-89
SQL Injection
CVE-2025-24672 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
983 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SERPed SERPed.net allows SQL Injection. This issue affects SERPed.net: from n/a through 4.4. CWE-89
SQL Injection
CVE-2025-24669 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
984 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle PPOM for WooCommerce allows Stored XSS. This issue affects PPOM for WooCommerce: from n… CWE-79
Cross-site Scripting
CVE-2025-24668 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
985 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeIsle AI Chatbot for WordPress – Hyve Lite allows Stored XSS. This issue affects AI Chatbot f… CWE-79
Cross-site Scripting
CVE-2025-24666 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
986 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tips and Tricks HQ, Ruhul Amin, Josh Lobe Simple Download Monitor allows Blind SQL Injection. Thi… CWE-89
SQL Injection
CVE-2025-24663 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
987 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WordPress Download Manager Premium Packages allows Blind SQL Injection. This issue affects Premiu… CWE-89
SQL Injection
CVE-2025-24659 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
988 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Hawes Auction Nudge – Your eBay on Your Site allows Stored XSS. This issue affects Auction Nu… CWE-79
Cross-site Scripting
CVE-2025-24658 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
989 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee Wishlist for WooCommerce allows Stored XSS. This issue affects Wishlist for WooCommerce… CWE-79
Cross-site Scripting
CVE-2025-24657 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
990 - - - Missing Authorization vulnerability in Revmakx WP Duplicate – WordPress Migration Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Duplicate – Wor… CWE-862
 Missing Authorization
CVE-2025-24652 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm