Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 4:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198431 7.5 危険 firefly - FireFly の modules/admin/include/config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2460 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
198432 7.5 危険 firefly - FireFly における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2456 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
198433 6 警告 GNU Project - GNU findutils の locate におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2452 2012-06-26 15:46 2007-06-4 Show GitHub Exploit DB Packet Storm
198434 5 警告 Caucho Technology - Caucho Resin Professional および Caucho Resin におけるシステムパスを取得される脆弱性 - CVE-2007-2441 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
198435 5 警告 Caucho Technology - Caucho Resin Professional および Caucho Resin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2440 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
198436 9.4 危険 Caucho Technology - Caucho Resin Professional および Caucho Resin における COM または LPT デバイスからデータを読み取られる脆弱性 - CVE-2007-2439 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
198437 10 危険 aventail - Aventail Connect の asnsp.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-2434 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
198438 6.8 警告 ariadne - Ariadne の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2433 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
198439 7.5 危険 ahhp-portal - Ahhp-Portal の page.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2428 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
198440 5 警告 blackdot - Imageview の fileview.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2425 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 - - - In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute … New - CVE-2024-57487 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
762 - - - An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 512… New - CVE-2024-48883 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
763 - - - An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers. New - CVE-2024-46919 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
764 - - - The Contact Form Master WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used… Update - CVE-2024-12587 2025-01-14 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
765 - - - Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity.php. Update - CVE-2024-54687 2025-01-14 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
766 7.5 HIGH
Network 		huawei harmonyos Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability. Update NVD-CWE-noinfo
CVE-2024-56437 2025-01-14 04:27 2025-01-8 Show GitHub Exploit DB Packet Storm
767 5.9 MEDIUM
Network 		huawei harmonyos Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Update CWE-362
Race Condition 		CVE-2024-54120 2025-01-14 04:27 2025-01-8 Show GitHub Exploit DB Packet Storm
768 - - - An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does not… New - CVE-2024-46921 2025-01-14 04:15 2025-01-14 Show GitHub Exploit DB Packet Storm
769 - - - Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint New - CVE-2024-46310 2025-01-14 04:15 2025-01-14 Show GitHub Exploit DB Packet Storm
770 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Breadcrumbs2 extension allows Cross-Site Scripting (XSS).… Update - CVE-2025-23078 2025-01-14 04:15 2025-01-11 Show GitHub Exploit DB Packet Storm