Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 20, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
641 7.5 重要
Network 		Alan Clarke urlite Alan Clarke の Node.js 用 urlite における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
CWE-20
CVE-2023-51931 2025-01-15 15:45 2023-12-26 Show GitHub Exploit DB Packet Storm
642 4.3 警告
Adjacent 		Huawei HUAWEI 4G Router B612 ファームウェア Huawei の HUAWEI 4G Router B612 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-124
CWE-787
CVE-2020-9086 2025-01-15 15:41 2020-02-18 Show GitHub Exploit DB Packet Storm
643 7.3 重要
Local 		Radmin Advanced IP Scanner Radmin の Advanced IP Scanner における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2024-30376 2025-01-15 15:40 2024-11-22 Show GitHub Exploit DB Packet Storm
644 5.5 警告
Local 		クアルコム SD 205 ファームウェア
SD 632 ファームウェア
SD 212 ファームウェア
SD 625 ファームウェア
SD 430 ファームウェア
MDM9206 ファームウェア
MDM9607 ファームウェア
SD 450… 		複数のクアルコム製品における脆弱性 CWE-16
CWE-noinfo
CVE-2018-11922 2025-01-15 15:37 2018-06-7 Show GitHub Exploit DB Packet Storm
645 9.8 緊急
Network 		マイクロソフト Microsoft Partner Center Partner.Microsoft.Com の特権昇格の脆弱性 CWE-269
CWE-Other
CVE-2024-49035 2025-01-15 15:32 2024-11-26 Show GitHub Exploit DB Packet Storm
646 8.8 重要
Network 		Gym Management System project Gym Management System codezips の Gym Management System における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2025-0231 2025-01-15 15:25 2025-01-5 Show GitHub Exploit DB Packet Storm
647 9.8 緊急
Network 		Projectworlds Travel Management System fabianros の Travel Management System における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2025-0229 2025-01-15 15:21 2025-01-5 Show GitHub Exploit DB Packet Storm
648 9.8 緊急
Network 		campcodes Complete Student Grading System campcodes の Complete Student Grading System における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2025-0212 2025-01-15 15:12 2025-01-4 Show GitHub Exploit DB Packet Storm
649 7.5 重要
Network 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-227
CWE-noinfo
CVE-2024-56442 2025-01-15 15:04 2024-12-26 Show GitHub Exploit DB Packet Storm
650 7.5 重要
Network 		クアルコム QCA8081 ファームウェア
QCA6431 ファームウェア
qca6698aq ファームウェア
fastconnect 6900 ファームウェア
QCA6595AU ファームウェア
QCA6421 ファームウェア
QCA8337 ファームウェア
QCA6574A … 		複数のクアルコム製品における不正な型変換に関する脆弱性 CWE-704
CWE-704
CVE-2023-33101 2025-01-15 15:01 2023-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276111 - aleris web_publishing_server SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL commands via the mode parameter. CWE-89
SQL Injection 		CVE-2007-6032 2008-09-6 06:32 2007-11-20 Show GitHub Exploit DB Packet Storm
276112 - swsoft confixx_professional PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the … CWE-94
Code Injection 		CVE-2007-6042 2008-09-6 06:32 2007-11-21 Show GitHub Exploit DB Packet Storm
276113 - nuked-klan nuked-klan Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: the provenance of this informat… CWE-79
Cross-site Scripting 		CVE-2007-6090 2008-09-6 06:32 2007-11-22 Show GitHub Exploit DB Packet Storm
276114 - ingate ingate_firewall
ingate_siparator 		Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attacker… NVD-CWE-Other
CVE-2007-6099 2008-09-6 06:32 2007-11-22 Show GitHub Exploit DB Packet Storm
276115 - zabbix zabbix_agentd zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges. NVD-CWE-noinfo
CWE-16
Configuration 		CVE-2007-6210 2008-09-6 06:32 2007-12-4 Show GitHub Exploit DB Packet Storm
276116 - beehive_forum beehive_forum Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014. NVD-CWE-noinfo
CVE-2007-6241 2008-09-6 06:32 2007-12-5 Show GitHub Exploit DB Packet Storm
276117 - cisco ios Unspecified vulnerability in Cisco IOS allows remote attackers to obtain the IOS version via unspecified vectors involving a "common network service", aka PSIRT-1255024833. NOTE: as of 20071016, the… CWE-200
Information Exposure 		CVE-2007-5550 2008-09-6 06:31 2007-10-19 Show GitHub Exploit DB Packet Storm
276118 - cisco ios Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vagu… NVD-CWE-Other
CVE-2007-5551 2008-09-6 06:31 2007-10-19 Show GitHub Exploit DB Packet Storm
276119 - cisco ios Integer overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable informat… CWE-189
Numeric Errors 		CVE-2007-5552 2008-09-6 06:31 2007-10-19 Show GitHub Exploit DB Packet Storm
276120 - oracle database_server Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no ac… CWE-200
Information Exposure 		CVE-2007-5554 2008-09-6 06:31 2007-10-19 Show GitHub Exploit DB Packet Storm