Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
891 8.8 重要
Network 		Creativetiem academy lms kodezen の WordPress 用 academy lms における脆弱性 CWE-noinfo
情報不足 		CVE-2024-1505 2025-01-23 11:34 2024-03-13 Show GitHub Exploit DB Packet Storm
892 8.8 重要
Network 		podsfoundation pods podsfoundation の WordPress 用 pods における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2023-6967 2025-01-23 11:33 2023-12-19 Show GitHub Exploit DB Packet Storm
893 8.8 重要
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47760 2025-01-23 11:32 2023-11-9 Show GitHub Exploit DB Packet Storm
894 9.8 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2023-5779 2025-01-23 11:31 2023-10-26 Show GitHub Exploit DB Packet Storm
895 4.3 警告
Network 		podsfoundation pods podsfoundation の WordPress 用 pods における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-6965 2025-01-23 11:31 2023-12-19 Show GitHub Exploit DB Packet Storm
896 8.8 重要
Network 		Sonaar Music mp3 audio player for music
 radio & podcast 		Sonaar Music の WordPress 用 mp3 audio player for music, radio & podcast における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47822 2025-01-23 11:31 2023-11-12 Show GitHub Exploit DB Packet Storm
897 8.8 重要
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2023-51529 2025-01-23 11:31 2023-12-20 Show GitHub Exploit DB Packet Storm
898 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2891 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
899 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2895 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
900 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2902 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276481 - mambo mambo MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this inf… NVD-CWE-Other
CVE-2007-2557 2008-11-15 15:49 2007-05-10 Show GitHub Exploit DB Packet Storm
276482 - parallels parallels_desktop Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in t… NVD-CWE-Other
CVE-2007-2454 2008-11-15 15:48 2007-05-3 Show GitHub Exploit DB Packet Storm
276483 - parallels parallels_desktop Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as demonstrated by INT 0xAA; (2) an IRET instruction when an invalid address is at … NVD-CWE-Other
CVE-2007-2455 2008-11-15 15:48 2007-05-3 Show GitHub Exploit DB Packet Storm
276484 - myserver myserver server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintende… NVD-CWE-Other
CVE-2007-1588 2008-11-15 15:45 2007-03-22 Show GitHub Exploit DB Packet Storm
276485 - rediff toolbar The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arg… NVD-CWE-Other
CVE-2007-1402 2008-11-15 15:44 2007-03-11 Show GitHub Exploit DB Packet Storm
276486 - oracle database_server Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges. NVD-CWE-Other
CVE-2007-1442 2008-11-15 15:44 2007-03-14 Show GitHub Exploit DB Packet Storm
276487 - design4online userpages2 SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL commands via the art_id parameter. NOTE: the provenance of this information i… NVD-CWE-Other
CVE-2007-1077 2008-11-15 15:43 2007-02-23 Show GitHub Exploit DB Packet Storm
276488 - scrymud scrymud Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors, possibly related to denial of service caused by a search that begins with a .* sequence. NVD-CWE-Other
CVE-2007-1098 2008-11-15 15:43 2007-02-27 Show GitHub Exploit DB Packet Storm
276489 - tor tor Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into u… NVD-CWE-Other
CVE-2007-1103 2008-11-15 15:43 2007-02-27 Show GitHub Exploit DB Packet Storm
276490 - microsoft publisher Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this in… NVD-CWE-Other
CVE-2007-1117 2008-11-15 15:43 2007-02-27 Show GitHub Exploit DB Packet Storm