Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
771 8.8 重要
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-37869 2025-01-24 10:44 2023-07-10 Show GitHub Exploit DB Packet Storm
772 7.8 重要
Local 		マイクロフォーカス株式会社 Operations Agent マイクロフォーカス株式会社の Operations Agent における脆弱性 CWE-269
CWE-noinfo
CVE-2024-0622 2025-01-24 10:44 2024-02-15 Show GitHub Exploit DB Packet Storm
773 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1409 2025-01-24 10:44 2024-03-13 Show GitHub Exploit DB Packet Storm
774 7.2 重要
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 CWE-183
CWE-Other
CVE-2024-1654 2025-01-24 10:44 2024-03-14 Show GitHub Exploit DB Packet Storm
775 6.1 警告
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG におけるクロスサイトスクリプティングの脆弱性 CWE-76
CWE-79
CVE-2024-1883 2025-01-24 10:44 2024-03-14 Show GitHub Exploit DB Packet Storm
776 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1997 2025-01-24 10:44 2024-03-13 Show GitHub Exploit DB Packet Storm
777 7.5 重要
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-10400 2025-01-24 10:44 2024-11-21 Show GitHub Exploit DB Packet Storm
778 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスの Junos OS Evolved における脆弱性 CWE-20
CWE-noinfo
CVE-2024-21590 2025-01-24 10:44 2024-04-12 Show GitHub Exploit DB Packet Storm
779 6.7 警告
Local 		F5 Networks BIG-IP Advanced Firewall Manager (AFM)
BIG-IP Analytics
BIG-IP Link Controller
BIG-IP Application Security Manager (ASM)
BIG-IP … 		複数の F5 Networks 製品における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-21782 2025-01-24 10:43 2024-02-14 Show GitHub Exploit DB Packet Storm
780 7.5 重要
Network 		F5 Networks BIG-IP Advanced Firewall Manager (AFM)
BIG-IP Analytics
BIG-IP Link Controller
BIG-IP Application Security Manager (ASM)
BIG-IP … 		複数の F5 Networks 製品における脆弱性 CWE-908
CWE-noinfo
CVE-2024-23314 2025-01-24 10:25 2024-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274461 - sam_crew myblog PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vec… NVD-CWE-Other
CVE-2007-1990 2011-03-8 11:53 2007-04-12 Show GitHub Exploit DB Packet Storm
274462 - mynews mynews PHP remote file inclusion vulnerability in include/blocks/week_events.php in MyNews 4.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index] parameter… NVD-CWE-Other
CVE-2007-2014 2011-03-8 11:53 2007-04-13 Show GitHub Exploit DB Packet Storm
274463 - avant-garde_solutions mosmedia Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the … NVD-CWE-Other
CVE-2007-2042 2011-03-8 11:53 2007-04-17 Show GitHub Exploit DB Packet Storm
274464 - openads openads Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbi… NVD-CWE-Other
CVE-2007-2046 2011-03-8 11:53 2007-04-17 Show GitHub Exploit DB Packet Storm
274465 - openads openads CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP respo… NVD-CWE-Other
CVE-2007-2047 2011-03-8 11:53 2007-04-17 Show GitHub Exploit DB Packet Storm
274466 - bftpd bftpd Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable. NVD-CWE-Other
CVE-2007-2051 2011-03-8 11:53 2007-04-17 Show GitHub Exploit DB Packet Storm
274467 - open-gorotto open-gorotto Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition before 20070416 allow remote attackers to inject arbitrary web … NVD-CWE-Other
CVE-2007-2071 2011-03-8 11:53 2007-04-18 Show GitHub Exploit DB Packet Storm
274468 - limesoft limesoft_guestbook Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attackers to inject arbitrary PHP code into posts.txt via the name parameter. NOTE: … NVD-CWE-Other
CVE-2007-2092 2011-03-8 11:53 2007-04-18 Show GitHub Exploit DB Packet Storm
274469 - rha7_downloads rha7_downloads SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector… NVD-CWE-Other
CVE-2007-2107 2011-03-8 11:53 2007-04-18 Show GitHub Exploit DB Packet Storm
274470 - minigal minigal The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the (1) name or (2) email parameter. NOTE: the p… NVD-CWE-Other
CVE-2007-2146 2011-03-8 11:53 2007-04-19 Show GitHub Exploit DB Packet Storm