Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192711 7.5 危険 mynews - MyNews の include/blocks/week_events.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2014 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192712 4.3 警告 jex-treme - JEx-Treme Einfacher Passworschutz の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2013 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192713 5.8 警告 mimarsinan - MimarSinan CompreXX におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2012 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192714 6.8 警告 Mambo Foundation
Joomla!		 - Mambo および Joomla! 用の Takhopper コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2005 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192715 7.5 危険 inoutmailinglistmanager - InoutMailingListManager における SQL インジェクションの脆弱性 - CVE-2007-2004 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192716 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2003 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192717 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2002 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192718 7.5 危険 nazarkin.name - Weatimages の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1999 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192719 7.5 危険 hiox india - HGB における任意の PHP コードを挿入される脆弱性 - CVE-2007-1998 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
192720 7.5 危険 mamboxchange - Mambo 用の com_zoom モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1992 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 4.3 MEDIUM
Network 		apple macos
ipados
iphone_os
safari
visionos 		The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoof… NVD-CWE-noinfo
CVE-2025-24113 2025-02-1 07:15 2025-01-28 Show GitHub Exploit DB Packet Storm
612 7.5 HIGH
Network 		apple macos A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An attacker may gain access to protected parts of the fil… NVD-CWE-noinfo
CVE-2024-54557 2025-02-1 07:15 2025-01-28 Show GitHub Exploit DB Packet Storm
613 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.2. An app may be able to edit NVRAM variables. NVD-CWE-noinfo
CVE-2024-54536 2025-02-1 07:15 2025-01-28 Show GitHub Exploit DB Packet Storm
614 3.3 LOW
Local 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to approve a launch daemon without user consent. NVD-CWE-noinfo
CVE-2024-54516 2025-02-1 07:15 2025-01-28 Show GitHub Exploit DB Packet Storm
615 6.5 MEDIUM
Network 		- - A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user w… - CVE-2025-23367 2025-02-1 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
616 - - - Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File::ParseStream and related functions. - CVE-2024-57509 2025-02-1 06:15 2025-01-30 Show GitHub Exploit DB Packet Storm
617 - - - Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrary code and obtain sensitive information via the password an… - CVE-2024-57395 2025-02-1 06:15 2025-01-30 Show GitHub Exploit DB Packet Storm
618 - - - The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote attackers to reach the administration panel and discover ho… - CVE-2024-23733 2025-02-1 06:15 2025-01-30 Show GitHub Exploit DB Packet Storm
619 7.8 HIGH
Local 		apple watchos
ipados
macos
tvos
iphone_os 		The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory. CWE-787
 Out-of-bounds Write 		CVE-2024-54517 2025-02-1 06:15 2025-01-28 Show GitHub Exploit DB Packet Storm
620 7.2 HIGH
Network 		vruiz vr-frases The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 3.0.1 due to insufficient escaping on the user … CWE-89
SQL Injection 		CVE-2025-0861 2025-02-1 05:43 2025-01-30 Show GitHub Exploit DB Packet Storm