Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193571 7.5 危険 photo organizer - Photo Organizer における SQL インジェクションの脆弱性 - CVE-2006-6245 2012-09-25 15:36 2006-12-4 Show GitHub Exploit DB Packet Storm
193572 7.5 危険 MailEnable - MailEnbale NetWebAdmin の Webadmin における空のパスワードを認証される脆弱性 CWE-255
証明書・パスワード管理
CVE-2006-6239 2012-09-25 15:36 2006-12-3 Show GitHub Exploit DB Packet Storm
193573 5 警告 neoengine - NeoEngine 用などの neonet/core.cpp におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6227 2012-09-25 15:36 2006-06-27 Show GitHub Exploit DB Packet Storm
193574 7.5 危険 neoengine - NeoEngine などにおけるフォーマットストリングの脆弱性 - CVE-2006-6226 2012-09-25 15:36 2006-06-27 Show GitHub Exploit DB Packet Storm
193575 7.5 危険 nivisec - Nivisec Hacks List の admin_hacks_list.php における SQL インジェクションの脆弱性 - CVE-2006-6216 2012-09-25 15:36 2006-11-30 Show GitHub Exploit DB Packet Storm
193576 7.5 危険 pegames - PEGames の index.php における PHP リモートファイルインクルージョン攻撃を実行される脆弱性 - CVE-2006-6213 2012-09-25 15:36 2006-11-30 Show GitHub Exploit DB Packet Storm
193577 7.5 危険 iisworks - ASP ListPics の listpics.asp における SQL インジェクションの脆弱性 - CVE-2006-6210 2012-09-25 15:36 2006-11-30 Show GitHub Exploit DB Packet Storm
193578 7.5 危険 midicart software - MidiCart ASP Shopping Cart などにおける SQL インジェクションの脆弱性 - CVE-2006-6209 2012-09-25 15:36 2006-11-30 Show GitHub Exploit DB Packet Storm
193579 5 警告 krishan - Mambo の flyspray コンポーネントにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-6203 2012-09-25 15:36 2006-11-30 Show GitHub Exploit DB Packet Storm
193580 7.5 危険 nukeai - NukeAI モジュールの modules/NukeAI/util.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6202 2012-09-25 15:36 2006-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
821 - - - Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Show notice or message on admin area allows Stored XSS. This issue affects Show notice or message on admin area: from n/a through 2.0. CWE-352
 Origin Validation Error
CVE-2025-25075 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
822 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nirmal Kumar Ram WP Social Stream allows Stored XSS. This issue affects WP Social Stream: from n/a through 1.1. CWE-352
 Origin Validation Error
CVE-2025-25074 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
823 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vasilis Triantafyllou Easy WP Tiles allows Stored XSS. This issue affects Easy WP Tiles: from n/a… CWE-79
Cross-site Scripting
CVE-2025-25073 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
824 - - - Cross-Site Request Forgery (CSRF) vulnerability in thunderbax WP Admin Custom Page allows Stored XSS. This issue affects WP Admin Custom Page: from n/a through 1.5.0. CWE-352
 Origin Validation Error
CVE-2025-25072 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
825 - - - Cross-Site Request Forgery (CSRF) vulnerability in topplugins Vignette Ads allows Stored XSS. This issue affects Vignette Ads: from n/a through 0.2. CWE-352
 Origin Validation Error
CVE-2025-25071 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
826 - - - A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather). The vulnerability is present in the Product … - CVE-2025-1077 2025-02-7 18:15 2025-02-7 Show GitHub Exploit DB Packet Storm
827 - - - Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malici… - CVE-2025-22880 2025-02-7 17:15 2025-02-7 Show GitHub Exploit DB Packet Storm
828 4.3 MEDIUM
Network
- - The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-ele… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-13841 2025-02-7 16:15 2025-02-7 Show GitHub Exploit DB Packet Storm
829 - - - A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service co… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-1072 2025-02-7 13:15 2025-02-7 Show GitHub Exploit DB Packet Storm
830 - - - Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with r… CWE-80
Basic XSS
CVE-2025-22402 2025-02-7 12:15 2025-02-7 Show GitHub Exploit DB Packet Storm