Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199691 5 警告 ESET - ESET NOD32 Antivirus におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3972 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
199692 5 警告 ESET - ESET NOD32 Antivirus における整数オーバーフローの脆弱性 - CVE-2007-3971 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
199693 5 警告 ESET - ESET NOD32 Antivirus における任意のコードを実行される脆弱性 - CVE-2007-3970 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
199694 5 警告 dirlist - dirLIST の index.php における除外フォルダのコンテンツを一覧にされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3968 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
199695 5 警告 dirlist - PHP dirLIST の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3967 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
199696 7.5 危険 fsp - fsplib の fsplib.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3962 2012-06-26 15:54 2007-07-23 Show GitHub Exploit DB Packet Storm
199697 5 警告 fsp - fsplib の fsplib.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3961 2012-06-26 15:54 2007-07-23 Show GitHub Exploit DB Packet Storm
199698 9.3 危険 アップル - Apple Safari などの PCRE ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3944 2012-06-26 15:54 2007-07-23 Show GitHub Exploit DB Packet Storm
199699 7.5 危険 adaptive business design - Infinite Responder における SQL インジェクションの脆弱性 - CVE-2007-3943 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
199700 7.5 危険 a-shop - A-shop における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3937 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
941 8.8 HIGH
Network 		jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser. CWE-89
SQL Injection 		CVE-2024-57769 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
942 - - - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-… - CVE-2025-21631 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
943 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in basteln3rk Save & Import Image from URL allows Reflected XSS. This issue affects Save & Import Im… CWE-79
Cross-site Scripting 		CVE-2025-23960 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
944 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tatsuya Fukata, Alexander Ovsov wp-flickr-press allows Reflected XSS. This issue affects wp-flick… CWE-79
Cross-site Scripting 		CVE-2025-23894 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
945 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SuryaBhan Custom Coming Soon allows Reflected XSS. This issue affects Custom Coming Soon: from n/… CWE-79
Cross-site Scripting 		CVE-2025-23836 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
946 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Legal + allows Reflected XSS. This issue affects Legal +: from n/a through 1.0. CWE-79
Cross-site Scripting 		CVE-2025-23835 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
947 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Links/Problem Reporter allows Reflected XSS. This issue affects Links/Problem Reporter: … CWE-79
Cross-site Scripting 		CVE-2025-23834 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
948 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sayocode SC Simple Zazzle allows Reflected XSS. This issue affects SC Simple Zazzle: from n/a thr… CWE-79
Cross-site Scripting 		CVE-2025-23733 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
949 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound FLX Dashboard Groups allows Reflected XSS. This issue affects FLX Dashboard Groups: from… CWE-79
Cross-site Scripting 		CVE-2025-23730 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
950 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fures XTRA Settings allows Reflected XSS. This issue affects XTRA Settings: from n/a through 2.1.… CWE-79
Cross-site Scripting 		CVE-2025-23729 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm