Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188661 7.5 危険 kmrg-itb - OtomiGenX の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2642 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
188662 7.5 危険 Joomla! - Joomla! 用の JooBlog コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2630 2012-09-25 17:17 2008-06-9 Show GitHub Exploit DB Packet Storm
188663 6.5 警告 オラクル - Oracle PeopleSoft Enterprise などの製品の PeopleSoft PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2622 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188664 4 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2621 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188665 6.5 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2620 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188666 6.5 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2618 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188667 6.5 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2617 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188668 6.5 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2616 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188669 6.5 警告 オラクル - Oracle E-Business Suite の Mobile Application Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2596 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188670 4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2586 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - Buffer Overflow vulnerability in Neat Board NFC v.1.20240620.0015 allows a physically proximate attackers to escalate privileges via a crafted payload to the password field New - CVE-2024-48806 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
62 - - - Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9. New - CVE-2024-13312 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
63 - - - Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*. New - CVE-2024-13311 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
64 - - - Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal: *.*. New - CVE-2024-13310 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
65 - - - Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1. New - CVE-2024-13309 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
66 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Butt… New - CVE-2024-13308 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
67 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Entity Form Steps allows Cross-Site Scripting (XSS).This issue affects Entity Form Steps: … New - CVE-2024-13305 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
68 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3. New - CVE-2024-13304 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
69 - - - Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2. New - CVE-2024-13303 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
70 - - - Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3. New - CVE-2024-13302 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm