Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192331 7.8 危険 IBM - iSeries マシン上の IBM OS/400 におけるファイアーウォールルールを回避される脆弱性 - CVE-2007-3537 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
192332 7.2 危険 NVIDIA - Gentoo Linux で使用される nvidia-drivers におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3532 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
192333 7.5 危険 hispah - youtubeclone の msg.php における SQL インジェクションの脆弱性 - CVE-2007-3518 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
192334 7.5 危険 カスペルスキー - Kaspersky Anti-Spam の Web ベース製品における特定のディレクトリへのアクセス権を取得される脆弱性 - CVE-2007-3502 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
192335 4.3 警告 htmlpurifier - HTML Purifier の smoketests/configForm.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3498 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
192336 5 警告 マイクロソフト - Microsoft Internet Explorer 7 におけるページ履歴の存在を特定される脆弱性 - CVE-2007-3497 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
192337 6.8 警告 Papoo Software - Papoo CMS におけるデータベース全体を読まれる脆弱性 - CVE-2007-3494 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
192338 7.5 危険 マイクロソフト
nctsoft products		 - NCTAudioStudio2 の NCTWavChunksEditor2.dll における任意のファイルを上書きされる脆弱性 - CVE-2007-3493 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
192339 7.5 危険 マイクロソフト - Microsoft Excel 2003 SP2 における脆弱性 - CVE-2007-3490 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
192340 6.4 警告 ヒューレット・パッカード - HP Photo Digital Imaging の hpqxml.dll における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3487 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 5.4 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially le… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-56471 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2012 5.4 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially le… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-56470 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2013 4.8 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within… CWE-80
Basic XSS 		CVE-2024-38318 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2014 4.8 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the inten… CWE-79
Cross-site Scripting 		CVE-2024-38317 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2015 4.3 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-38316 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2016 - - - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. Thi… - CVE-2025-23419 2025-02-6 05:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2017 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local user with minimal privi… CWE-269
 Improper Privilege Management 		CVE-2025-24805 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2018 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentat… CWE-1287
 Improper Validation of Specified Type of Input 		CVE-2025-24804 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2019 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentat… CWE-79
Cross-site Scripting 		CVE-2025-24803 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2020 - - - CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Using a specially crafted file, a user could potentially upload a file containing code that when executed … CWE-79
Cross-site Scripting 		CVE-2025-24372 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm