Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200061 6.5 警告 crea-book - Crea-Book の admin/configurer2.php における任意の PHP コードを実行される脆弱性 - CVE-2007-2001 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
200062 6.8 警告 codebreak - CodeBreak の codebreak.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1996 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
200063 4.3 警告 Dotclear - DotClear におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1989 2012-06-26 15:46 2007-04-12 Show GitHub Exploit DB Packet Storm
200064 7.5 危険 barnraiser - barnraiser AROUNDMe における任意の PHP コードを実行される脆弱性 - CVE-2007-1986 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200065 7.5 危険 cyboards - Cyboards PHP Lite の include/default_header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1983 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200066 7.5 危険 gazi okul sitesi - Gazi Okul Sitesi の fotokategori.asp における SQL インジェクションの脆弱性 - CVE-2007-1971 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200067 5 警告 exv2 - eXV2 CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-1966 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200068 4.3 警告 exv2 - eXV2 CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1965 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
200069 6.8 警告 guernion sylvain portail - Guernion Sylvain Portail Web Php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1957 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
200070 7.5 危険 archivexpert - ArchiveXpert におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1954 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 29, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress File Search allows Reflected XSS. This issue affects WordPress File Search: fr… CWE-79
Cross-site Scripting 		CVE-2025-23867 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
922 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EU DSGVO Helper allows Reflected XSS. This issue affects EU DSGVO Helper: from n/a throu… CWE-79
Cross-site Scripting 		CVE-2025-23866 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
923 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kolja Nolte Flexible Blogtitle allows Reflected XSS. This issue affects Flexible Blogtitle: from … CWE-79
Cross-site Scripting 		CVE-2025-23846 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
924 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows Reflected XSS. This issue affects Co… CWE-79
Cross-site Scripting 		CVE-2025-23812 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
925 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP2APP allows Reflected XSS. This issue affects WP2APP: from n/a through 2.6.2. CWE-79
Cross-site Scripting 		CVE-2025-23811 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
926 - - - Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe allows Reflected XSS. This issue affects Ultimate Subscribe: from n/a through 1.3. CWE-352
 Origin Validation Error 		CVE-2025-23806 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
927 - - - Cross-Site Request Forgery (CSRF) vulnerability in PQINA Snippy allows Reflected XSS. This issue affects Snippy: from n/a through 1.4.1. CWE-352
 Origin Validation Error 		CVE-2025-23803 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
928 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliott Robson Mass Messaging in BuddyPress allows Reflected XSS. This issue affects Mass Messagin… CWE-79
Cross-site Scripting 		CVE-2025-23798 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
929 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows SQL Injection. This issue affects Co… CWE-89
SQL Injection 		CVE-2025-23784 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
930 - - - Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WM Options Import Export allows Retrieve Embedded Sensitive Data. This issue affects WM Options Import Export: from n/a thr… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-23781 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm