Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192391 5 警告 The PHP Group
webSPELL		 - PHP の WebSPELL におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2369 2012-09-25 16:47 2007-04-30 Show GitHub Exploit DB Packet Storm
192392 8.5 危険 Irfan Skiljan - IrfanView におけるバッファオーバーフローの脆弱性 - CVE-2007-2363 2012-09-25 16:47 2007-04-30 Show GitHub Exploit DB Packet Storm
192393 10 危険 opendap - OPeNDAP の CGI_server 用の DODS_Dispatch.pm における任意のコマンドを実行される脆弱性 - CVE-2007-2355 2012-09-25 16:47 2007-04-30 Show GitHub Exploit DB Packet Storm
192394 7.2 危険 ヒューレット・パッカード - HP-UX の HP Power Manager RA における任意のコードを実行される脆弱性 - CVE-2007-2351 2012-09-25 16:47 2007-04-25 Show GitHub Exploit DB Packet Storm
192395 5.8 警告 Invision Power Services, Inc - IP.Board におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2349 2012-09-25 16:47 2007-04-26 Show GitHub Exploit DB Packet Storm
192396 7.5 危険 oneclick cms - OneClick CMS の main/forum/komentar.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2347 2012-09-25 16:47 2007-04-27 Show GitHub Exploit DB Packet Storm
192397 7.5 危険 Phorum - Phorum における SQL インジェクションの脆弱性 - CVE-2007-2339 2012-09-25 16:47 2007-04-18 Show GitHub Exploit DB Packet Storm
192398 7.5 危険 Phorum - Phorum の include/admin/banlist.php におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2338 2012-09-25 16:47 2007-04-18 Show GitHub Exploit DB Packet Storm
192399 4.3 警告 Exponent CMS project - Exponent CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-2337 2012-09-25 16:47 2007-04-27 Show GitHub Exploit DB Packet Storm
192400 7.8 危険 intervations - InterVations NaviCOPA Web Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2336 2012-09-25 16:47 2007-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 29, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress File Search allows Reflected XSS. This issue affects WordPress File Search: fr… CWE-79
Cross-site Scripting 		CVE-2025-23867 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
922 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EU DSGVO Helper allows Reflected XSS. This issue affects EU DSGVO Helper: from n/a throu… CWE-79
Cross-site Scripting 		CVE-2025-23866 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
923 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kolja Nolte Flexible Blogtitle allows Reflected XSS. This issue affects Flexible Blogtitle: from … CWE-79
Cross-site Scripting 		CVE-2025-23846 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
924 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows Reflected XSS. This issue affects Co… CWE-79
Cross-site Scripting 		CVE-2025-23812 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
925 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP2APP allows Reflected XSS. This issue affects WP2APP: from n/a through 2.6.2. CWE-79
Cross-site Scripting 		CVE-2025-23811 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
926 - - - Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe allows Reflected XSS. This issue affects Ultimate Subscribe: from n/a through 1.3. CWE-352
 Origin Validation Error 		CVE-2025-23806 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
927 - - - Cross-Site Request Forgery (CSRF) vulnerability in PQINA Snippy allows Reflected XSS. This issue affects Snippy: from n/a through 1.4.1. CWE-352
 Origin Validation Error 		CVE-2025-23803 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
928 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliott Robson Mass Messaging in BuddyPress allows Reflected XSS. This issue affects Mass Messagin… CWE-79
Cross-site Scripting 		CVE-2025-23798 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
929 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows SQL Injection. This issue affects Co… CWE-89
SQL Injection 		CVE-2025-23784 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
930 - - - Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WM Options Import Export allows Retrieve Embedded Sensitive Data. This issue affects WM Options Import Export: from n/a thr… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-23781 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm