Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197661 7.8 危険 アップル
マイクロソフト		 - Apple Safari におけるサービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性 - CVE-2007-3274 2012-06-26 15:46 2007-06-19 Show GitHub Exploit DB Packet Storm
197662 7.5 危険 FuseTalk - FuseTalk の index.cfm における SQL インジェクションの脆弱性 - CVE-2007-3273 2012-06-26 15:46 2007-06-19 Show GitHub Exploit DB Packet Storm
197663 4.3 警告 fuzzylime forum - Fuzzylime Forum の low.php におけるクロスサイトスクリプティングの脆弱性の脆弱性 - CVE-2007-3267 2012-06-26 15:46 2007-06-19 Show GitHub Exploit DB Packet Storm
197664 4.3 警告 dkret - dKret の widgets/widget_search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3261 2012-06-26 15:46 2007-06-19 Show GitHub Exploit DB Packet Storm
197665 7.8 危険 Astaro - ASG におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3253 2012-06-26 15:46 2007-06-18 Show GitHub Exploit DB Packet Storm
197666 7.8 危険 e-vision - e-Vision CMS におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3251 2012-06-26 15:46 2007-06-18 Show GitHub Exploit DB Packet Storm
197667 7.5 危険 Elxis - Elxis CMS の mod_banners.php における SQL インジェクションの脆弱性 - CVE-2007-3250 2012-06-26 15:46 2007-06-18 Show GitHub Exploit DB Packet Storm
197668 7.5 危険 bbpress - bbPress の bb-includes/formatting-functions.php における SQL インジェクションの脆弱性 - CVE-2007-3244 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
197669 4.3 警告 bbpress - bbPress の bb-login.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3243 2012-06-26 15:46 2007-06-14 Show GitHub Exploit DB Packet Storm
197670 4.3 警告 fuzzylime forum - Fuzzylime Forum の low.php におけるクロスサイトスクリプティングの脆弱性の脆弱性 - CVE-2007-3235 2012-06-26 15:46 2007-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 - - - WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerabilit… New CWE-79
Cross-site Scripting 		CVE-2025-22597 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
252 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the modulos_visiveis.php endpoint of the WeGIA application. This vulnerabili… New CWE-79
Cross-site Scripting 		CVE-2025-22596 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
253 - - - Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execut… New CWE-22
CWE-94
CWE-434
Path Traversal
Code Injection
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22152 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
254 - - - DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause t… New CWE-289
 Authentication Bypass by Alternate Name 		CVE-2024-56511 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
255 - - - Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions. New - CVE-2024-50807 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
256 - - - An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. New - CVE-2024-46210 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
257 - - - Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals. New - CVE-2024-29971 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
258 - - - Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals. New - CVE-2024-29970 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
259 - - - Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions. New - CVE-2024-25371 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
260 - - - FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. New - CVE-2025-23022 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm