Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192371 7.5 危険 LMS Developers - LMS の lib/language.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3325 2012-09-25 16:47 2007-06-21 Show GitHub Exploit DB Packet Storm
192372 7.5 危険 The PHP Group - PHP の Tidy エクステンションにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3294 2012-09-25 16:47 2007-06-20 Show GitHub Exploit DB Packet Storm
192373 7.5 危険 livecms - LiveCMS の categoria.php における SQL インジェクションの脆弱性 - CVE-2007-3293 2012-09-25 16:47 2007-06-20 Show GitHub Exploit DB Packet Storm
192374 7.5 危険 livecms - LiveCMS における任意の PHP コードをアップロードされる脆弱性 - CVE-2007-3292 2012-09-25 16:47 2007-06-20 Show GitHub Exploit DB Packet Storm
192375 4.3 警告 livecms - LiveCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3291 2012-09-25 16:47 2007-06-20 Show GitHub Exploit DB Packet Storm
192376 9.3 危険 livecms - LiveCMS の categoria.php における重要な情報を取得される脆弱性 - CVE-2007-3290 2012-09-25 16:47 2007-06-20 Show GitHub Exploit DB Packet Storm
192377 7.8 危険 マイクロソフト - Microsoft Office MSODataSourceControl ActiveX オブジェクトにおけるバッファオーバーフローの脆弱性 - CVE-2007-3282 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
192378 4.3 警告 php hosting biller - Php Hosting Biller の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3281 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
192379 7.1 危険 mailwasher - MailWasher Server における任意のユーザアカウントへアクセスされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-3275 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
192380 7.8 危険 miniBB - MiniBB の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3272 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1991 7.8 HIGH
Local 		- - IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with unnecessary privileges. CWE-250
 Execution with Unnecessary Privileges 		CVE-2024-49814 2025-02-6 10:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1992 5.3 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers. CWE-117
 Improper Output Neutralization for Logs 		CVE-2024-56473 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1993 6.4 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering … CWE-79
Cross-site Scripting 		CVE-2024-56472 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1994 5.4 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially le… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-56471 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1995 5.4 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially le… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-56470 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1996 4.8 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within… CWE-80
Basic XSS 		CVE-2024-38318 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1997 4.8 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the inten… CWE-79
Cross-site Scripting 		CVE-2024-38317 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1998 4.3 MEDIUM
Network 		- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-38316 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1999 - - - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. Thi… - CVE-2025-23419 2025-02-6 05:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2000 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local user with minimal privi… CWE-269
 Improper Privilege Management 		CVE-2025-24805 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm