Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189261 5 警告 myphpscripts - myPHPscripts Login Session におけるパスワードハッシュを発見される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5855 2012-09-25 17:26 2009-01-6 Show GitHub Exploit DB Packet Storm
189262 4.3 警告 myphpscripts - myPHPscripts Login Session の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5854 2012-09-25 17:26 2009-01-6 Show GitHub Exploit DB Packet Storm
189263 7.5 危険 mypbs - MyPBS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5851 2012-09-25 17:26 2009-01-6 Show GitHub Exploit DB Packet Storm
189264 4.6 警告 pdfjam - pdfjam における権限を取得される脆弱性 CWE-Other
その他
CVE-2008-5843 2012-09-25 17:26 2009-01-5 Show GitHub Exploit DB Packet Storm
189265 4.3 警告 Horde - Horde Application Framework におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5917 2012-09-25 17:26 2008-12-10 Show GitHub Exploit DB Packet Storm
189266 6.8 警告 ktorrent - KTorrent の Web インターフェースプラグインにおける任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5906 2012-09-25 17:26 2008-10-20 Show GitHub Exploit DB Packet Storm
189267 4.3 警告 ktorrent - KTorrent の Web インターフェースプラグインにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5905 2012-09-25 17:26 2008-10-20 Show GitHub Exploit DB Packet Storm
189268 4.3 警告 knowledgetree document management - KnowledgeTree におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5858 2012-09-25 17:26 2008-12-15 Show GitHub Exploit DB Packet Storm
189269 6.5 警告 knowledgetree document management - KnowledgeTree の DropDocuments プラグインにおける管理者権限を取得される脆弱性 CWE-DesignError
CVE-2008-5857 2012-09-25 17:26 2008-12-15 Show GitHub Exploit DB Packet Storm
189270 7.5 危険 igamingcms - iGaming における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5841 2012-09-25 17:26 2009-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pflonk Sidebar-Content from Shortcode allows DOM-Based XSS.This issue affects Sidebar-Content fro… CWE-79
Cross-site Scripting
CVE-2025-23642 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
582 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Ehrhardt Powie's pLinks PagePeeker allows DOM-Based XSS.This issue affects Powie's pLinks … CWE-79
Cross-site Scripting
CVE-2025-23641 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
583 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through 1.2.0. CWE-352
 Origin Validation Error
CVE-2025-23640 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
584 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0. CWE-352
 Origin Validation Error
CVE-2025-23639 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
585 - - - Cross-Site Request Forgery (CSRF) vulnerability in Gordon French Comment-Emailer allows Stored XSS.This issue affects Comment-Emailer: from n/a through 1.0.5. CWE-352
 Origin Validation Error
CVE-2025-23627 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
586 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact For… CWE-79
Cross-site Scripting
CVE-2025-23623 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
587 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Trofimov Captchelfie – Captcha by Selfie allows Reflected XSS.This issue affects Captchelf… CWE-79
Cross-site Scripting
CVE-2025-23620 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
588 - - - Cross-Site Request Forgery (CSRF) vulnerability in Andrea Brandi Twitter Shortcode allows Stored XSS.This issue affects Twitter Shortcode: from n/a through 0.9. CWE-352
 Origin Validation Error
CVE-2025-23618 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
589 - - - Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal Floatbox Plus allows Stored XSS.This issue affects Floatbox Plus: from n/a through 1.4.4. CWE-352
 Origin Validation Error
CVE-2025-23617 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
590 - - - Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3. CWE-352
 Origin Validation Error
CVE-2025-23577 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm