Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192751 7.8 危険 LIGHTTPD - lighttpd におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1870 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
192752 5 警告 LIGHTTPD - lighttpd におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1869 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
192753 10 危険 IBM - IBM Tivoli Provisioning Manager for OS Deployment におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1868 2012-09-25 16:47 2007-04-4 Show GitHub Exploit DB Packet Storm
192754 10 危険 Irfan Skiljan - IrfanView におけるバッファオーバーフローの脆弱性 - CVE-2007-1867 2012-09-25 16:47 2007-04-4 Show GitHub Exploit DB Packet Storm
192755 5 警告 日立 - uCosminexus などの製品で使用される Hitachi Cosminexus Component Container における脆弱性 - CVE-2007-1854 2012-09-25 16:47 2007-03-30 Show GitHub Exploit DB Packet Storm
192756 5 警告 日立 - Hitachi JP1/HiCommand DeviceManager における認証情報を取得される脆弱性 - CVE-2007-1853 2012-09-25 16:47 2007-03-30 Show GitHub Exploit DB Packet Storm
192757 7.5 危険 PHP-Fusion - PHP-Fusion の Expanded Calendar モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1845 2012-09-25 16:47 2007-04-3 Show GitHub Exploit DB Packet Storm
192758 6.8 警告 MapTools.org - MapLab の gmapfactory/params.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1843 2012-09-25 16:47 2007-04-3 Show GitHub Exploit DB Packet Storm
192759 7.5 危険 jsboard - JSBoard の login.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1842 2012-09-25 16:47 2007-04-3 Show GitHub Exploit DB Packet Storm
192760 4.3 警告 LDAP Account Manager - LAM の lib/modules.inc における脆弱性 - CVE-2007-1840 2012-09-25 16:47 2007-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 - - - An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_process_pmt in media_tools/mpegts.c:2163 that can cause a denial of service (DOS… - CVE-2024-57184 2025-01-25 00:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1022 - - - GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_tile_columns - CVE-2022-47090 2025-01-25 00:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1023 - - - Information Disclosure in API in Replicated Replicated Classic versions prior to 2.53.1 on all platforms allows authenticated users with Admin Console access to retrieve sensitive data, including app… - CVE-2021-42718 2025-01-25 00:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1024 8.8 HIGH
Network 		- - IBM Cognos Dashboards 4.0.7 and 5.0.0 on Cloud Pak for Data could allow a remote attacker to perform unauthorized actions due to dependency confusion. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-41739 2025-01-24 23:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1025 5.4 MEDIUM
Network 		- - The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajax_preview_link' function. Thi… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-11913 2025-01-24 23:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1026 4.3 MEDIUM
Network 		- - The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas… CWE-1230
 Exposure of Sensitive Information Through Metadata 		CVE-2024-10324 2025-01-24 23:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1027 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound FooGallery Captions allows Reflected XSS. This issue affects FooGallery Captions: from n… CWE-79
Cross-site Scripting 		CVE-2025-23889 2025-01-24 20:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1028 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom Page Extensions allows Reflected XSS. This issue affects Custom Page Extensions: … CWE-79
Cross-site Scripting 		CVE-2025-23888 2025-01-24 20:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1029 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound MJ Contact us allows Reflected XSS. This issue affects MJ Contact us: from n/a through 5… CWE-79
Cross-site Scripting 		CVE-2025-23885 2025-01-24 20:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1030 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Sticky Button allows Stored XSS. This issue affects Sticky Button: from n/a through 1.0. CWE-79
Cross-site Scripting 		CVE-2025-23839 2025-01-24 20:15 2025-01-24 Show GitHub Exploit DB Packet Storm