Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192111 5 警告 Mozilla Foundation - Mozilla Firefox におけるステータスバーのコンテンツを偽造される脆弱性 - CVE-2007-4357 2012-09-25 16:59 2007-08-14 Show GitHub Exploit DB Packet Storm
192112 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 および 7 における重要な情報を取得される脆弱性 - CVE-2007-4356 2012-09-25 16:59 2007-08-14 Show GitHub Exploit DB Packet Storm
192113 4.3 警告 ヒューレット・パッカード - HP SiteScope の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4350 2012-09-25 16:59 2008-10-21 Show GitHub Exploit DB Packet Storm
192114 4.3 警告 ヒューレット・パッカード - HP Performance Agent などの製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2007-4349 2012-09-25 16:59 2008-10-23 Show GitHub Exploit DB Packet Storm
192115 4.3 警告 IBM - IBM TSM Client の CAD サービスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4348 2012-09-25 16:59 2007-10-30 Show GitHub Exploit DB Packet Storm
192116 7.5 危険 Ipswitch, Inc. - IPSwitch IMail Server に同梱された IMail Client におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4345 2012-09-25 16:59 2007-10-31 Show GitHub Exploit DB Packet Storm
192117 5.1 警告 Irfan Skiljan - IrfanView におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4343 2012-09-25 16:59 2007-10-16 Show GitHub Exploit DB Packet Storm
192118 7.5 危険 omnistar - Omnistar Lib2 PHP の adm/my_statistics.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4341 2012-09-25 16:59 2007-08-14 Show GitHub Exploit DB Packet Storm
192119 10 危険 Haudenschilt - Ryan Haudenschilt FCMS の index.php における任意のアカウントにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-4338 2012-09-25 16:59 2007-08-14 Show GitHub Exploit DB Packet Storm
192120 4.3 警告 マイクロソフト - Microsoft DirectX Media SDK にパッケージされた DXTLIPI.DLL におけるバッファオーバーフローの脆弱性 - CVE-2007-4336 2012-09-25 16:59 2007-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1701 4.3 MEDIUM
Network
- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls. CWE-284
Improper Access Control
CVE-2024-22316 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1702 6.4 MEDIUM
Network
- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… CWE-79
Cross-site Scripting
CVE-2023-52292 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1703 4.3 MEDIUM
Network
- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. CWE-204
 Response Discrepancy Information Exposure
CVE-2023-47159 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1704 - - - DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wps_… - CVE-2024-57595 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1705 - - - In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bounds checks. This may result in a stack-bas… - CVE-2024-50697 2025-01-28 01:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1706 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows PHP Local File Inclusion. T… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2025-24782 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1707 - - - Missing Authorization vulnerability in Houzez.co Houzez. This issue affects Houzez: from n/a through 3.4.0. CWE-862
 Missing Authorization
CVE-2025-24747 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1708 - - - Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3. CWE-862
 Missing Authorization
CVE-2025-24744 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1709 - - - Missing Authorization vulnerability in Rometheme RomethemeKit For Elementor. This issue affects RomethemeKit For Elementor: from n/a through 1.5.2. CWE-862
 Missing Authorization
CVE-2025-24743 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1710 - - - Cross-Site Request Forgery (CSRF) vulnerability in WP Go Maps (formerly WP Google Maps) WP Go Maps. This issue affects WP Go Maps: from n/a through 9.0.40. CWE-352
 Origin Validation Error
CVE-2025-24742 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm