Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192411 5 警告 IBM - WSPortal の content.php における重要な情報を取得される脆弱性 - CVE-2007-3127 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
192412 7.8 危険 Mozilla Foundation - Mac OS X 上などの Mozilla Firefox におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3073 2012-09-25 16:47 2007-05-17 Show GitHub Exploit DB Packet Storm
192413 7.1 危険 Mozilla Foundation - Mozilla Firefox におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3072 2012-09-25 16:47 2007-01-18 Show GitHub Exploit DB Packet Storm
192414 7.5 危険 particle soft - Particle Soft Particle Gallery の viewimage.php における SQL インジェクションの脆弱性 - CVE-2007-3065 2012-09-25 16:47 2007-06-5 Show GitHub Exploit DB Packet Storm
192415 4.3 警告 mealex - My Databook の diary.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3064 2012-09-25 16:47 2007-06-5 Show GitHub Exploit DB Packet Storm
192416 7.5 危険 kartli alisveris sistemi - Kartli Alisveris Sistemi の news.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3119 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192417 7.5 危険 k-letter - K-letter における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3118 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192418 5 警告 MaraDNS - MaraDNS の server/MaraDNS.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3116 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192419 7.8 危険 MaraDNS - MaraDNS の server/MaraDNS.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3115 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192420 5 警告 MaraDNS - MaraDNS の server/MaraDNS.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3114 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1131 - - - In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute syzbot found that TCA_FLOW_RSHIFT attribute was not validated. Right shit… - CVE-2025-21653 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1132 - - - In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs … - CVE-2025-21646 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1133 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' str… - CVE-2025-21640 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1134 8.8 HIGH
Network 		jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser. CWE-89
SQL Injection 		CVE-2024-57769 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
1135 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21639 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1136 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21638 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1137 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure … - CVE-2025-21637 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1138 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'n… - CVE-2025-21636 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1139 - - - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-… - CVE-2025-21631 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1140 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in basteln3rk Save & Import Image from URL allows Reflected XSS. This issue affects Save & Import Im… CWE-79
Cross-site Scripting 		CVE-2025-23960 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm