Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188821 7.5 危険 moviephp - Movie PHP Script の system/services/init.php における PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4836 2012-09-25 17:38 2010-05-6 Show GitHub Exploit DB Packet Storm
188822 4.3 警告 KASSELER CMS - Kasseler CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4822 2012-09-25 17:38 2010-04-27 Show GitHub Exploit DB Packet Storm
188823 4.3 警告 mybboard - MyBB の myps.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4813 2012-09-25 17:38 2010-04-27 Show GitHub Exploit DB Packet Storm
188824 4.3 警告 Mario Matzulla - TYPO3 用の Calendar Base エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4804 2012-09-25 17:38 2010-04-23 Show GitHub Exploit DB Packet Storm
188825 7.5 危険 Joachim Ruhs - TYPO3 の flatmgr 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4802 2012-09-25 17:38 2010-04-23 Show GitHub Exploit DB Packet Storm
188826 4.3 警告 Erik de Castro Lopo - libsndfile の htk_read_header などの関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4835 2012-09-25 17:38 2009-05-28 Show GitHub Exploit DB Packet Storm
188827 5.8 警告 オラクル - MySQL Connector/NET における偽造された SSL 証明書で中間者攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4833 2012-09-25 17:38 2009-06-17 Show GitHub Exploit DB Packet Storm
188828 7.5 危険 OpenX - OpenX における管理者アカウントのアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-4830 2012-09-25 17:38 2009-12-24 Show GitHub Exploit DB Packet Storm
188829 2.1 注意 james glasgow
john vandervort		 - Drupal 用の Automated Logout モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4829 2012-09-25 17:38 2009-12-23 Show GitHub Exploit DB Packet Storm
188830 7.5 危険 kolab - Kolab Server の Kolab Webclient における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4824 2012-09-25 17:38 2009-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
701 - - - School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view specific pages and obtain database information as well as plaintext administrat… New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2025-1144 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
702 - - - Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of th… New CWE-798
 Use of Hard-coded Credentials 		CVE-2025-1143 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
703 - - - A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/Category.php. The manipulation… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1170 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
704 3.5 LOW
Network 		- - A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The m… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1169 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
705 - - - A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php.… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1168 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
706 - - - A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected by this issue is some unknown functionality of the file /hr_soft/admin/Update_… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1167 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
707 - - - A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The mani… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-1166 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
708 - - - SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any… New CWE-22
Path Traversal 		CVE-2025-25243 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
709 - - - Due to a missing authorization check, an attacker who is logged in to application can view/ delete ?My Overtime Requests? which could allow the attacker to access employee information. This leads to … New CWE-862
 Missing Authorization 		CVE-2025-25241 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
710 - - - The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting ma… New CWE-601
Open Redirect 		CVE-2025-24876 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm