Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197671 5.8 警告 galeon - Galeon におけるフィッシング攻撃の脆弱性 - CVE-2007-3145 2012-06-26 15:46 2007-06-11 Show GitHub Exploit DB Packet Storm
197672 4.3 警告 atom - Atom Photoblog の atomPhotoBlog.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3135 2012-06-26 15:46 2007-06-8 Show GitHub Exploit DB Packet Storm
197673 4.3 警告 atom - Atom PhotoBlog の atomPhotoBlog.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3134 2012-06-26 15:46 2007-06-8 Show GitHub Exploit DB Packet Storm
197674 4.6 警告 freevms - FreeVMS の backup/src/vmsbackup.c におけるバッファオーバーフローの脆弱性 - CVE-2007-3124 2012-06-26 15:46 2007-06-7 Show GitHub Exploit DB Packet Storm
197675 5 警告 ClamAV - ClamAV の lunrar.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3123 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
197676 5 警告 ClamAV - ClamAV の 構文解析エンジンにおけるスキャンを回避される脆弱性 - CVE-2007-3122 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
197677 4.3 警告 aiocp - AIOCP の public/code/cp_dpage.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3120 2012-06-26 15:46 2007-06-7 Show GitHub Exploit DB Packet Storm
197678 4.3 警告 beatnik - Firefox の Andy Frank Beatnik 拡張におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3110 2012-06-26 15:46 2007-06-7 Show GitHub Exploit DB Packet Storm
197679 4.3 警告 Apache Software Foundation - Apache MyFaces Tomahawk の 特定の JSF アプリケーションにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3101 2012-06-26 15:46 2007-06-18 Show GitHub Exploit DB Packet Storm
197680 5 警告 Castle Rock Computing - Castle Rock Computing SNMPc の SNMPc Server プロセスにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3098 2012-06-26 15:46 2007-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Spiess TS Comfort DB allows Reflected XSS.This issue affects TS Comfort DB: from n/a throu… New CWE-79
Cross-site Scripting
CVE-2025-22345 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
42 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in P3JX Cf7Save Extension allows Reflected XSS.This issue affects Cf7Save Extension: from n/a throug… New CWE-79
Cross-site Scripting
CVE-2025-22331 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
43 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Waghmare MG Parallax Slider allows Reflected XSS.This issue affects MG Parallax Slider: fr… New CWE-79
Cross-site Scripting
CVE-2025-22330 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
44 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light allows Reflected XSS.This issue affects Widgetize Pages Light: fr… New CWE-79
Cross-site Scripting
CVE-2025-22313 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
45 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeAstrology Team Product Table for WooCommerce allows Reflected XSS.This issue affects Product … New CWE-79
Cross-site Scripting
CVE-2025-22307 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
46 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tripetto WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto allows S… New CWE-79
Cross-site Scripting
CVE-2025-22295 2025-01-10 01:16 2025-01-10 Show GitHub Exploit DB Packet Storm
47 - - - A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to `root` and potentially lead to code execution. New - CVE-2024-53706 2025-01-10 01:16 2025-01-9 Show GitHub Exploit DB Packet Storm
48 - - - Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components. This allows attackers to access sensitive informa… New - CVE-2024-53522 2025-01-10 01:16 2025-01-8 Show GitHub Exploit DB Packet Storm
49 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset The at_xdmac_memset_create_desc may return NULL, which will… New CWE-476
 NULL Pointer Dereference
CVE-2024-56767 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
50 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Syzbot reports [1] an uninitialized value issue found by K… New CWE-908
 Use of Uninitialized Resource
CVE-2024-56769 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm