Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
691 5.3 警告
Network 		Fedora Project
Moodle		 Fedora
Moodle 		Moodle の Moodle 等複数ベンダの製品における脆弱性 CWE-233
CWE-noinfo
CVE-2024-25979 2025-01-24 12:25 2024-02-19 Show GitHub Exploit DB Packet Storm
692 5.3 警告
Network 		Fedora Project
Moodle		 Fedora
Moodle 		Moodle の Moodle 等複数ベンダの製品における脆弱性 CWE-284
CWE-noinfo
CVE-2024-25981 2025-01-24 12:25 2024-02-19 Show GitHub Exploit DB Packet Storm
693 9.8 緊急
Network 		PHOENIX CONTACT charx sec-3100 ファームウェア
charx sec-3050 ファームウェア
charx sec-3000 ファームウェア
charx sec-3150 ファームウェア 		複数の PHOENIX CONTACT 製品における同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2024-25996 2025-01-24 12:25 2024-03-12 Show GitHub Exploit DB Packet Storm
694 4.8 警告
Network 		PHOENIX CONTACT charx sec-3100 ファームウェア
charx sec-3050 ファームウェア
charx sec-3000 ファームウェア
charx sec-3150 ファームウェア 		複数の PHOENIX CONTACT 製品における不完全なクリーンアップに関する脆弱性 CWE-459
不完全なクリーンアップ 		CVE-2024-26005 2025-01-24 12:25 2024-03-12 Show GitHub Exploit DB Packet Storm
695 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1996 2025-01-24 12:06 2024-03-13 Show GitHub Exploit DB Packet Storm
696 9.8 緊急
Network 		abocms abo.cms abocms の abo.cms における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-25227 2025-01-24 12:06 2024-03-15 Show GitHub Exploit DB Packet Storm
697 5.4 警告
Network 		Basixonline NEX-Forms Basixonline の WordPress 用 NEX-Forms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25593 2025-01-24 12:06 2024-03-15 Show GitHub Exploit DB Packet Storm
698 7.2 重要
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 CWE-76
CWE-Other
CVE-2024-1882 2025-01-24 12:01 2024-03-14 Show GitHub Exploit DB Packet Storm
699 4.3 警告
Network 		themelooks enter addons themelooks の WordPress 用 enter addons におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2024-10868 2025-01-24 12:01 2024-11-23 Show GitHub Exploit DB Packet Storm
700 7.5 重要
Network 		utarit SoliPay Mobile App utarit の SoliPay Mobile App における脆弱性 CWE-648
CWE-noinfo
CVE-2023-4993 2025-01-24 11:56 2023-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 10, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274411 - enterasys netsight_console
netsight_inventory_manager 		The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service (daemon crash) via a U… NVD-CWE-Other
CVE-2007-2344 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
274412 - enterasys netsight_console
netsight_inventory_manager 		The vendor has addressed this issue with the following product updates: Apply Security Patch 1 : http://www.enterasys.com/products/management/downloads/security_and_patches/ Or upgrade to Ente… NVD-CWE-Other
CVE-2007-2344 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
274413 - freepbx freepbx admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter. NVD-CWE-Other
CVE-2007-2350 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
274414 - symantec backupexec_system_recovery
livestate_recovery
norton_ghost
norton_save_and_recovery 		Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share cr… NVD-CWE-Other
CVE-2007-2360 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
274415 - symantec backupexec_system_recovery
livestate_recovery
norton_ghost
norton_save_and_recovery 		"In order for this exploit to have an impact, administrators would either have to configure client machines to save restore points images to a private share, or the vulnerable machine would have to b… NVD-CWE-Other
CVE-2007-2360 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
274416 - symantec enterprise_security_manager The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code … NVD-CWE-Other
CVE-2007-2375 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
274417 - firefly firefly PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT paramete… NVD-CWE-Other
CVE-2007-2460 2011-03-8 11:54 2007-05-3 Show GitHub Exploit DB Packet Storm
274418 - novell securelogin Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their… NVD-CWE-Other
CVE-2007-2475 2011-03-8 11:54 2007-05-3 Show GitHub Exploit DB Packet Storm
274419 - novell securelogin Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to Active Directory (AD) password changes. NVD-CWE-Other
CVE-2007-2476 2011-03-8 11:54 2007-05-3 Show GitHub Exploit DB Packet Storm
274420 - vmware server
workstation 		The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x100… NVD-CWE-Other
CVE-2007-2491 2011-03-8 11:54 2007-05-4 Show GitHub Exploit DB Packet Storm