Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 21, 2025, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201 5.4 警告
Network
Sonaar Music mp3 audio player for music
 radio & podcast
Sonaar Music の WordPress 用 mp3 audio player for music, radio & podcast におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-10268 2025-01-20 12:21 2024-11-19 Show GitHub Exploit DB Packet Storm
202 4.3 警告
Network
webinarpress webinarpress WordPress 用 webinarpress における認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2024-11271 2025-01-20 12:21 2024-11-15 Show GitHub Exploit DB Packet Storm
203 5.4 警告
Network
wpextended The Ultimate WordPress Toolkit  - WP Extended wpextended の WordPress 用 The Ultimate WordPress Toolkit - WP Extended におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-862
CVE-2024-11916 2025-01-20 12:21 2024-11-27 Show GitHub Exploit DB Packet Storm
204 4.3 警告
Network
Hire Web Xperts Passwords Manager Hire Web Xperts の WordPress 用 Passwords Manager における認証の欠如に関する脆弱性 New CWE-862
CWE-89
CVE-2024-12614 2025-01-20 12:21 2024-12-13 Show GitHub Exploit DB Packet Storm
205 9.8 緊急
Network
oretnom23 Laundry Shop Management System oretnom23 の Laundry Shop Management System における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-3465 2025-01-20 12:03 2024-04-8 Show GitHub Exploit DB Packet Storm
206 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. ac500 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の ac500 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-3907 2025-01-20 12:03 2024-04-17 Show GitHub Exploit DB Packet Storm
207 7.8 重要
Local
Ivanti secure access client Ivanti の secure access client における脆弱性 New CWE-267
CWE-Other
CVE-2024-7571 2025-01-20 12:02 2024-11-12 Show GitHub Exploit DB Packet Storm
208 3.3
Local
Ivanti secure access client Ivanti の secure access client における脆弱性 New CWE-267
CWE-732
CWE-732
CWE-Other
CVE-2024-9842 2025-01-20 12:02 2024-11-12 Show GitHub Exploit DB Packet Storm
209 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2024-53208 2025-01-20 11:59 2024-11-26 Show GitHub Exploit DB Packet Storm
210 5.3 警告
Network
IBM Jazz Foundation IBM の Jazz Foundation における脆弱性 New CWE-266
CWE-noinfo
CVE-2023-26280 2025-01-20 11:59 2023-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 21, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275031 - dazuko dazuko Multiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to cause a denial of service (memory consumption) via unknown vectors. NVD-CWE-Other
CVE-2007-0461 2008-11-13 15:32 2007-01-24 Show GitHub Exploit DB Packet Storm
275032 - spoonlabs vivvo_article_management_cms SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines par… NVD-CWE-Other
CVE-2007-0574 2008-11-13 15:32 2007-01-31 Show GitHub Exploit DB Packet Storm
275033 - shaffer_solutions_corp dapcnfsd.dll Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue … NVD-CWE-Other
CVE-2007-0641 2008-11-13 15:32 2007-02-1 Show GitHub Exploit DB Packet Storm
275034 - docman docman Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors. NVD-CWE-Other
CVE-2007-0378 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm
275035 - docman docman Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NVD-CWE-Other
CVE-2007-0379 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm
275036 - docman docman DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors. NVD-CWE-Other
CVE-2007-0380 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm
275037 - adaptive_technology_resource_centre atutor Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these … NVD-CWE-Other
CVE-2007-0381 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm
275038 - postnuke_software_foundation postnuke Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NVD-CWE-Other
CVE-2007-0384 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm
275039 - postnuke_software_foundation postnuke The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/index.php, possibly involving an undefined id_cat variable. NVD-CWE-Other
CVE-2007-0385 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm
275040 - postnuke_software_foundation postnuke Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug." NVD-CWE-Other
CVE-2007-0386 2008-11-13 15:31 2007-01-20 Show GitHub Exploit DB Packet Storm