Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189551 7.5 危険 Ignite Realtime - Openfire の SIP プラグインの CallLogDAO における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6509 2012-09-25 17:27 2008-11-10 Show GitHub Exploit DB Packet Storm
189552 7.5 危険 Ignite Realtime - Openfire の Admin コンソールの AuthCheck フィルタにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6508 2012-09-25 17:27 2008-11-11 Show GitHub Exploit DB Packet Storm
189553 4.3 警告 Ignite Realtime - Openfire の Admin コンソールの login.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6510 2012-09-25 17:27 2006-04-7 Show GitHub Exploit DB Packet Storm
189554 7.5 危険 huseyin bora abaci - Joomla! 用の com_myalbum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6489 2012-09-25 17:27 2009-03-19 Show GitHub Exploit DB Packet Storm
189555 7.5 危険 mole-group - Mole Group Taxi Map Script の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6484 2012-09-25 17:27 2009-03-18 Show GitHub Exploit DB Packet Storm
189556 6.8 警告 justjoomla - Joomla! 用の treeg コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6482 2012-09-25 17:27 2009-03-18 Show GitHub Exploit DB Packet Storm
189557 7.5 危険 joomprod - Joomla! 用の versioning コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6481 2012-09-25 17:27 2009-03-17 Show GitHub Exploit DB Packet Storm
189558 6.8 警告 Parallels - Parallels Virtuozzo 用の VZPP Web インターフェースの "パスワード変更" 機能におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6479 2012-09-25 17:27 2009-03-16 Show GitHub Exploit DB Packet Storm
189559 6.8 警告 Parallels - Parallels Virtuozzo 用の VZPP Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6478 2012-09-25 17:27 2009-03-16 Show GitHub Exploit DB Packet Storm
189560 7.5 危険 mumbojumbo - Mumbo Jumbo Media OP4 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6477 2012-09-25 17:27 2009-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 5.3 MEDIUM
Network 		- - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthen… - CVE-2025-21498 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
762 9.9 CRITICAL
Network 		- - Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services). The supported version that is affected is 9.3.6. Easily exploitable vulnerabi… - CVE-2025-21556 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
763 5.5 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21555 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
764 5.3 MEDIUM
Network 		- - Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and… - CVE-2025-21554 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
765 4.2 MEDIUM
Network 		- - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.25, 21.3-21.16 and 23.4-23.6. Difficult to exploit vulnerability allows low privil… - CVE-2025-21553 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
766 6.5 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.9.2. Easily e… - CVE-2025-21552 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
767 6.0 MEDIUM
Local 		- - Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacke… - CVE-2025-21551 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
768 - - - Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification. - CVE-2024-57540 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
769 - - - Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail. - CVE-2024-57539 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
770 - - - Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification. - CVE-2024-57538 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm