Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192711 7.5 危険 mynews - MyNews の include/blocks/week_events.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2014 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192712 4.3 警告 jex-treme - JEx-Treme Einfacher Passworschutz の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2013 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192713 5.8 警告 mimarsinan - MimarSinan CompreXX におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2012 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192714 6.8 警告 Mambo Foundation
Joomla!		 - Mambo および Joomla! 用の Takhopper コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2005 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192715 7.5 危険 inoutmailinglistmanager - InoutMailingListManager における SQL インジェクションの脆弱性 - CVE-2007-2004 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192716 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2003 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192717 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2002 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192718 7.5 危険 nazarkin.name - Weatimages の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1999 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192719 7.5 危険 hiox india - HGB における任意の PHP コードを挿入される脆弱性 - CVE-2007-1998 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192720 7.5 危険 mamboxchange - Mambo 用の com_zoom モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1992 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1881 - - - In Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does not properly handle special characters in any of user provided parameters, allowing an attacker with acc… - CVE-2024-48418 2025-01-29 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1882 - - - Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting (XSS) in : /bin/goahead via /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilt… - CVE-2024-48417 2025-01-29 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1883 - - - Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/fromSetLanDhcpsClientbinding. - CVE-2024-48416 2025-01-29 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1884 - - - TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntp_ser… - CVE-2024-57590 2025-01-29 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1885 - - - A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as… - CVE-2025-24480 2025-01-29 04:15 2025-01-29 Show GitHub Exploit DB Packet Storm
1886 - - - A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privi… - CVE-2025-24479 2025-01-29 04:15 2025-01-29 Show GitHub Exploit DB Packet Storm
1887 - - - A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault cau… - CVE-2025-24478 2025-01-29 04:15 2025-01-29 Show GitHub Exploit DB Packet Storm
1888 - - - Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware produc… - CVE-2025-22217 2025-01-29 04:15 2025-01-29 Show GitHub Exploit DB Packet Storm
1889 6.3 MEDIUM
Network 		- - A vulnerability, which was classified as problematic, was found in pankajindevops scale up to 20241113. This affects an unknown part of the component API Endpoint. The manipulation leads to improper … CWE-284
CWE-266
Improper Access Control
 Incorrect Privilege Assignment 		CVE-2025-0783 2025-01-29 04:15 2025-01-29 Show GitHub Exploit DB Packet Storm
1890 - - - A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text. - CVE-2025-0631 2025-01-29 04:15 2025-01-29 Show GitHub Exploit DB Packet Storm