Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 4, 2025, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196061 4.6 警告 bitchx - BitchX の e_hostname 関数における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2007-5839 2012-06-26 15:54 2007-11-6 Show GitHub Exploit DB Packet Storm
196062 7.5 危険 afcommerce - Amazing Flash AFCommerce における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5836 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196063 5 警告 bosdev - BosDev BosNews の Install.php におけるサービス運用妨害 (ファイルの上書き) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5835 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196064 4.3 警告 bosdev - BosDev BosNews におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5834 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196065 3.5 注意 bosdev - BosDev BosMarket Business Directory System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5833 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196066 7.8 危険 アバイア - Avaya MSS および MN の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-5830 2012-06-26 15:54 2007-11-1 Show GitHub Exploit DB Packet Storm
196067 9.3 危険 EdrawSoft - EDImage.ocx の EDraw Flowchart ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5826 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196068 7.5 危険 firefly - Firefly Media Server の mt-dappd の webserver.c の ws_addarg 関数におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2007-5825 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196069 7.1 危険 firefly - Firefly Media Server の mt-dappd の webserver.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-5824 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
196070 6.8 警告 dm guestbook - DM Guestbook におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5821 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 4, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 - - - Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio … New CWE-862
 Missing Authorization
CVE-2024-56266 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
102 - - - Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through 1.14.0. New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-56264 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
103 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Shots for Dribbble allows DOM-Based XSS.This issue affects GS Shots for Dribbble: f… New CWE-79
Cross-site Scripting
CVE-2024-56263 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
104 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Coaches allows Stored XSS.This issue affects GS Coaches: from n/a through 1.1.0. New CWE-79
Cross-site Scripting
CVE-2024-56262 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
105 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins Project Showcase allows Stored XSS.This issue affects Project Showcase: from n/a throu… New CWE-79
Cross-site Scripting
CVE-2024-56261 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
106 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StorePlugin ShopElement allows Stored XSS.This issue affects ShopElement: from n/a through 2.0.0. New CWE-79
Cross-site Scripting
CVE-2024-56260 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
107 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AyeCode - WP Business Directory Plugins GeoDirectory allows Stored XSS.This issue affects GeoDire… New CWE-79
Cross-site Scripting
CVE-2024-56259 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
108 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBlockArt Magazine Blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through… New CWE-79
Cross-site Scripting
CVE-2024-56258 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
109 - - - Missing Authorization vulnerability in AyeCode AyeCode Connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through 1.3.8. New CWE-862
 Missing Authorization
CVE-2024-56255 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm
110 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Element… New CWE-79
Cross-site Scripting
CVE-2024-56254 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm