Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
371 6.5 警告
Adjacent
Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37031 2025-01-28 15:01 2023-06-28 Show GitHub Exploit DB Packet Storm
372 6.5 警告
Adjacent
Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37036 2025-01-28 15:01 2023-06-28 Show GitHub Exploit DB Packet Storm
373 7.8 重要
Local
クアルコム qam8775p ファームウェア
AR8035 ファームウェア
QAM8295P ファームウェア
fastconnect 6900 ファームウェア
QCA6391 ファームウェア
fastconnect 6200 ファームウェア
QCA6430 ファームウェア
QC…
複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2023-43538 2025-01-28 15:01 2023-09-19 Show GitHub Exploit DB Packet Storm
374 7.8 重要
Local
クアルコム QCA8337 ファームウェア
qcc2073 ファームウェア
AR8035 ファームウェア
QCA6696 ファームウェア
qca6554a ファームウェア
QCA6574 ファームウェア
QCA6574AU ファームウェア
qcc710 ファームウェア
qfw711…
複数のクアルコム製品における整数オーバーフローの脆弱性 CWE-190
CWE-190
CVE-2023-43545 2025-01-28 15:01 2023-09-19 Show GitHub Exploit DB Packet Storm
375 5.4 警告
Network
POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-0445 2025-01-28 15:01 2024-05-14 Show GitHub Exploit DB Packet Storm
376 5.4 警告
Network
Elementor Elementor Website Builder Elementor の WordPress 用 Elementor Website Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-0506 2025-01-28 15:01 2024-02-29 Show GitHub Exploit DB Packet Storm
377 5.4 警告
Network
getshortcodes shortcodes ultimate getshortcodes の WordPress 用 shortcodes ultimate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1808 2025-01-28 15:01 2024-02-28 Show GitHub Exploit DB Packet Storm
378 6.5 警告
Network
Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-2559 2025-01-28 15:01 2024-03-17 Show GitHub Exploit DB Packet Storm
379 5.4 警告
Network
POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2785 2025-01-28 15:01 2024-05-14 Show GitHub Exploit DB Packet Storm
380 6.5 警告
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2025
Microsoft Window…
Windows SmartScreen スプーフィングの脆弱性 CWE-451
CWE-noinfo
CVE-2025-21314 2025-01-28 14:49 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274261 - hitachi cosminexus_application_server_enterprise
cosminexus_application_server_standard
cosminexus_developer_light_version_6
cosminexus_developer_professional_version_6
cosminexus_developer_stand…
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a… CWE-20
 Improper Input Validation 
CVE-2007-5810 2011-03-8 12:01 2007-11-6 Show GitHub Exploit DB Packet Storm
274262 - apple mac_os_x Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbitrary Keychain items via a crafted Java applet. CWE-287
Improper Authentication
CVE-2007-5862 2011-03-8 12:01 2007-12-19 Show GitHub Exploit DB Packet Storm
274263 - activepdf
autonomy
ibm
symantec
docconverter
keyview_export_sdk
keyview_filter_sdk
keyview_viewer_sdk
lotus_notes
mail_security
Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3,… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-5910 2011-03-8 12:01 2007-11-10 Show GitHub Exploit DB Packet Storm
274264 - ibm lotus_domino Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script… CWE-79
Cross-site Scripting
CVE-2007-5924 2011-03-8 12:01 2007-11-10 Show GitHub Exploit DB Packet Storm
274265 - pear structures_datagrid_datasource_mdb2 The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2… CWE-200
Information Exposure
CVE-2007-5934 2011-03-8 12:01 2007-11-14 Show GitHub Exploit DB Packet Storm
274266 - tug texlive_2007 feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file. CWE-59
Link Following
CVE-2007-5940 2011-03-8 12:01 2007-11-14 Show GitHub Exploit DB Packet Storm
274267 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting
CVE-2007-5944 2011-03-8 12:01 2007-11-14 Show GitHub Exploit DB Packet Storm
274268 - script-fun sf-shoutbox Multiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) nick (aka Name) and (2) shou… CWE-79
Cross-site Scripting
CVE-2007-5948 2011-03-8 12:01 2007-11-14 Show GitHub Exploit DB Packet Storm
274269 - e-vendejo 0.2 SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2007-5951 2011-03-8 12:01 2007-11-14 Show GitHub Exploit DB Packet Storm
274270 - really_simple_caldav_store really_simple_caldav_store Unspecified vulnerability in Really Simple CalDAV Store (RSCDS) before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors. NVD-CWE-noinfo
CVE-2007-5953 2011-03-8 12:01 2007-11-14 Show GitHub Exploit DB Packet Storm