Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192421 5 警告 IBM - WSPortal の content.php における重要な情報を取得される脆弱性 - CVE-2007-3127 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
192422 7.8 危険 Mozilla Foundation - Mac OS X 上などの Mozilla Firefox におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3073 2012-09-25 16:47 2007-05-17 Show GitHub Exploit DB Packet Storm
192423 7.1 危険 Mozilla Foundation - Mozilla Firefox におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3072 2012-09-25 16:47 2007-01-18 Show GitHub Exploit DB Packet Storm
192424 7.5 危険 particle soft - Particle Soft Particle Gallery の viewimage.php における SQL インジェクションの脆弱性 - CVE-2007-3065 2012-09-25 16:47 2007-06-5 Show GitHub Exploit DB Packet Storm
192425 4.3 警告 mealex - My Databook の diary.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3064 2012-09-25 16:47 2007-06-5 Show GitHub Exploit DB Packet Storm
192426 7.5 危険 kartli alisveris sistemi - Kartli Alisveris Sistemi の news.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3119 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192427 7.5 危険 k-letter - K-letter における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3118 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192428 5 警告 MaraDNS - MaraDNS の server/MaraDNS.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3116 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192429 7.8 危険 MaraDNS - MaraDNS の server/MaraDNS.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3115 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
192430 5 警告 MaraDNS - MaraDNS の server/MaraDNS.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3114 2012-09-25 16:47 2007-06-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1971 - - - The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against h… - CVE-2024-13097 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1972 - - - The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored … - CVE-2024-13096 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1973 - - - The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow user… - CVE-2024-12768 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1974 - - - The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only mean… - CVE-2025-0938 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1975 - - - reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as `penetration_tester` or `auditor` t… CWE-284
Improper Access Control 		CVE-2025-24968 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1976 - - - reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exp… CWE-79
Cross-site Scripting 		CVE-2025-24967 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1977 - - - reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary … CWE-79
Cross-site Scripting 		CVE-2025-24966 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1978 - - - Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site W… CWE-1385
 Missing Origin Validation in WebSockets 		CVE-2025-24964 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1979 - - - Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the n… CWE-22
Path Traversal 		CVE-2025-24963 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1980 - - - AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving … CWE-120
Classic Buffer Overflow 		CVE-2025-0960 2025-02-5 05:15 2025-02-5 Show GitHub Exploit DB Packet Storm