Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197761 9.3 危険 Authentium - Authentium Command Antivirus の odapi.dll の特定の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-2917 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
197762 4.3 警告 gmtt - GMTT Music Distro の showown.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2916 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
197763 4.3 警告 clonuswiki - ClonusWiki の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2913 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
197764 7.5 危険 2z project - 2z project の includes/rating.php における SQL インジェクションの脆弱性 - CVE-2007-2905 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
197765 7.5 危険 Dokeos - Dokeos の main/auth/my_progress.php における SQL インジェクションの脆弱性 - CVE-2007-2902 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
197766 4.3 警告 Dokeos - Dokeos におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2901 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
197767 7.5 危険 2z project - 2z project の includes/rating.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-2898 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
197768 2.1 注意 bochs - Bochs のフロッピーディスクコントローラーのエミュレータにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2894 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
197769 7.2 危険 bochs - Bochs NE2000 エミュレータデバイスの bx_ne2k_c::rx_frame 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2893 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
197770 4.3 警告 asp-nuke - ASP-Nuke の news.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2892 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno … New - CVE-2024-13267 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
122 - - - Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4. New - CVE-2024-13266 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
123 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learnin… New - CVE-2024-13265 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
124 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno module allows PHP Local File Inclusion.This issue affects Opigno module: from 0… New - CVE-2024-13264 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
125 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group m… New - CVE-2024-13263 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
126 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3. New - CVE-2024-13261 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
127 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue importer: from 0.0.0 before 2.1.1. New - CVE-2024-13260 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
128 9.8 CRITICAL
Network 		- - The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letti… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10215 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
129 - - - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2. New - CVE-2024-13259 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
130 - - - Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13. New - CVE-2024-13258 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm