Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189241 8.8 危険 jun sota - FFFTP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6424 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
189242 5 警告 i-apps - PassWiki の passwiki.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6423 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
189243 7.5 危険 openrat - OpenRat の themes/default/include/html/insert.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6403 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
189244 7.5 危険 muskatli - Sofi WebGui における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6402 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
189245 7.5 危険 jetik - JETIK-WEB の sayfa.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6401 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
189246 7.5 危険 nexusjnr - Jbook の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6391 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189247 7.5 危険 ocean12tech - Ocean12 Membership Manager Pro の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6390 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189248 7.5 危険 mxmania - Gallery MX の pics_pre.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6379 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189249 7.5 危険 mxmania - Calendar Mx Professional の calendar_Eventupdate.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6378 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189250 7.5 危険 nexusjnr - Jbook の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6376 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
751 7.5 HIGH
Network
- - The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the search parame… CWE-89
SQL Injection
CVE-2025-0308 2025-01-18 15:15 2025-01-18 Show GitHub Exploit DB Packet Storm
752 6.1 MEDIUM
Network
- - The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.5 due to insufficient input saniti… CWE-79
Cross-site Scripting
CVE-2024-13516 2025-01-18 15:15 2025-01-18 Show GitHub Exploit DB Packet Storm
753 6.1 MEDIUM
Network
- - The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'path' parameter in all versions up to, and including, 2.2… CWE-79
Cross-site Scripting
CVE-2024-13515 2025-01-18 15:15 2025-01-18 Show GitHub Exploit DB Packet Storm
754 5.3 MEDIUM
Network
- - The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete… CWE-862
 Missing Authorization
CVE-2024-12071 2025-01-18 13:15 2025-01-18 Show GitHub Exploit DB Packet Storm
755 - - - Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where yo… CWE-94
Code Injection
CVE-2025-23209 2025-01-18 10:15 2025-01-18 Show GitHub Exploit DB Packet Storm
756 - - - Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3 - CVE-2024-11923 2025-01-18 09:15 2025-01-18 Show GitHub Exploit DB Packet Storm
757 - - - A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. - CVE-2023-50739 2025-01-18 09:15 2025-01-18 Show GitHub Exploit DB Packet Storm
758 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2020-0436 2025-01-18 09:15 2025-01-18 Show GitHub Exploit DB Packet Storm
759 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2020-0040 2025-01-18 09:15 2025-01-18 Show GitHub Exploit DB Packet Storm
760 - - - In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… - CVE-2018-9406 2025-01-18 09:15 2025-01-18 Show GitHub Exploit DB Packet Storm