Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189451 7.5 危険 manzovi - ProQuiz の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6312 2012-09-25 17:27 2009-02-27 Show GitHub Exploit DB Packet Storm
189452 7.5 危険 gwm - Galatolo WebManager における管理者権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6300 2012-09-25 17:27 2009-02-26 Show GitHub Exploit DB Packet Storm
189453 7.5 危険 maran - Maran PHP Shop の admin.php における管理者アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6296 2012-09-25 17:27 2009-02-26 Show GitHub Exploit DB Packet Storm
189454 6.8 警告 niclor - nicLOR Sito の includefile.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6290 2012-09-25 17:27 2009-02-26 Show GitHub Exploit DB Packet Storm
189455 7.8 危険 interface-medien - Interface Medien ibase の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6288 2012-09-25 17:27 2009-02-25 Show GitHub Exploit DB Packet Storm
189456 6.5 警告 ortus.nirn - CMS Ortus の engine/users/users_edit_pub.inc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6282 2012-09-25 17:27 2009-02-25 Show GitHub Exploit DB Packet Storm
189457 6.8 警告 mjcreation - FamilyProject の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6274 2012-09-25 17:27 2009-02-25 Show GitHub Exploit DB Packet Storm
189458 6 警告 myktools - MyKtools の configuration_script.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6273 2012-09-25 17:27 2009-02-25 Show GitHub Exploit DB Packet Storm
189459 7.5 危険 miticdjd - Dragan Mitic Apoll の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6272 2012-09-25 17:27 2009-02-25 Show GitHub Exploit DB Packet Storm
189460 7.5 危険 miticdjd - Dragan Mitic Apoll の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6270 2012-09-25 17:27 2009-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. - CVE-2025-0377 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
852 - - - TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by… - CVE-2024-57036 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
853 - - - PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php. - CVE-2024-56990 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
854 - - - In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… - CVE-2018-9464 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
855 - - - In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no… - CVE-2018-9461 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
856 - - - In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges need… - CVE-2018-9405 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
857 - - - In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privil… - CVE-2018-9401 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
858 - - - In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privile… - CVE-2018-9387 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
859 6.3 MEDIUM
Network 		- - A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/new_submit.php. The manipulation of t… - CVE-2025-0532 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
860 - - - PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via the parameter $address. - CVE-2024-56998 2025-01-22 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm