Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192001 6 警告 Invision Power Services, Inc - IP.Board のサブスクリプションマネージャにおけるメンバ ID を変更される脆弱性 CWE-20
不適切な入力確認
CVE-2007-4914 2012-09-25 16:59 2007-09-12 Show GitHub Exploit DB Packet Storm
192002 7.5 危険 Invision Power Services, Inc - IP.Board の ips_kernel/class_upload.php におけるスクリプトファイルをアップロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2007-4913 2012-09-25 16:59 2007-09-12 Show GitHub Exploit DB Packet Storm
192003 4.3 警告 Invision Power Services, Inc - IP.Board の ips_kernel/class_ajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4912 2012-09-25 16:59 2007-09-12 Show GitHub Exploit DB Packet Storm
192004 10 危険 netinvoicing - netInvoicing における脆弱性 CWE-noinfo
情報不足
CVE-2007-4910 2012-09-25 16:59 2007-09-17 Show GitHub Exploit DB Packet Storm
192005 6.8 警告 nuclearbb - NuclearBB の tasks/send_queued_emails.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4906 2012-09-25 16:59 2007-09-17 Show GitHub Exploit DB Packet Storm
192006 6.8 警告 マイクロソフト - Microsoft Visual Studio 6.0 の PDWizard.ocx における任意のプログラムを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2007-4891 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
192007 5.8 警告 マイクロソフト - Microsoft Visual Studio 6.0 の VBTOVSI.DLL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4890 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
192008 6.8 警告 The PHP Group - PHP の MySQL エクステンションにおける open_basedir 制限を回避される脆弱性 CWE-DesignError
CVE-2007-4889 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
192009 4.3 警告 media player classic - MPC におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-4884 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
192010 4.3 警告 MediaWiki - MediaWiki の BotQuery エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4883 2012-09-25 16:59 2007-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 - - - An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enum… - CVE-2025-24397 2025-01-24 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1162 4.9 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily expl… - CVE-2025-21504 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1163 4.9 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21503 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1164 6.5 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily expl… - CVE-2025-21501 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1165 5.4 MEDIUM
Network
- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… - CVE-2025-21507 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1166 6.5 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily expl… - CVE-2025-21500 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1167 4.9 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability al… - CVE-2025-21499 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1168 5.5 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21497 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1169 4.4 MEDIUM
Network
- - Vulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficu… - CVE-2025-21495 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1170 4.1 MEDIUM
Local
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. … - CVE-2025-21494 2025-01-24 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm