Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189541 5 警告 LightNEasy - LightNEasy の LightNEasy/lightneasy.php における管理者のパスワードハッシュを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6537 2012-09-25 17:27 2009-03-29 Show GitHub Exploit DB Packet Storm
189542 7.5 危険 paypalestores - Paypal eStores の admin/settings.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6535 2012-09-25 17:27 2009-03-26 Show GitHub Exploit DB Packet Storm
189543 7.5 危険 NicePHPScripts.com - Nice PHP FAQ Script の Admin Panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6525 2012-09-25 17:27 2009-03-25 Show GitHub Exploit DB Packet Storm
189544 10 危険 imatix - Xitami Web Server の SSI フィルタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2008-6520 2012-09-25 17:27 2009-03-25 Show GitHub Exploit DB Packet Storm
189545 10 危険 imatix - Xitami Web Server におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-6519 2012-09-25 17:27 2009-03-25 Show GitHub Exploit DB Packet Storm
189546 7.5 危険 nick jenkin - NewsHOWLER における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6517 2012-09-25 17:27 2009-03-25 Show GitHub Exploit DB Packet Storm
189547 5.8 警告 Ignite Realtime - Openfire の login.jsp におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6511 2012-09-25 17:27 2009-03-23 Show GitHub Exploit DB Packet Storm
189548 5 警告 opensymphony - Apache Struts などで使用される OpenSymphony XWork におけるコンテキストオブジェクトを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6504 2012-09-25 17:27 2009-03-23 Show GitHub Exploit DB Packet Storm
189549 5 警告 MoinMoin - MoinMoin の config/multiconfig.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-6549 2012-09-25 17:27 2008-03-18 Show GitHub Exploit DB Packet Storm
189550 5 警告 MoinMoin - MoinMoin の parser/text_rst.py における不正なインクルードファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6548 2012-09-25 17:27 2008-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
751 9.8 CRITICAL
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploi… - CVE-2025-21524 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
752 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21523 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
753 4.3 MEDIUM
Network 		- - Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). The supported version that is affected is 9.2. Easily expl… - CVE-2025-21563 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
754 4.3 MEDIUM
Network 		- - Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). The supported version that is affected is 9.2. Easily expl… - CVE-2025-21562 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
755 5.4 MEDIUM
Network 		- - Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allow… - CVE-2025-21561 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
756 5.5 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21559 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
757 5.4 MEDIUM
Network 		- - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.1.0-2… - CVE-2025-21558 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
758 5.4 MEDIUM
Network 		- - Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23.2 and 24.1. Easily exploitable vulnerability allows low privileged attacker with networ… - CVE-2025-21557 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
759 8.8 HIGH
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… - CVE-2025-21515 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
760 5.3 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… - CVE-2025-21514 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm