Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189571 5 警告 hans oesterholt - CMME におけるシステム情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6159 2012-09-25 17:26 2009-02-18 Show GitHub Exploit DB Packet Storm
189572 7.5 危険 hispah - Hispah Text Links Ads の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6155 2012-09-25 17:26 2009-02-16 Show GitHub Exploit DB Packet Storm
189573 7.5 危険 hispah - Hispah Text Links Ads の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6154 2012-09-25 17:26 2009-02-16 Show GitHub Exploit DB Packet Storm
189574 7.5 危険 jayeshp - Jay Patel Pixel8 Web Photo Album の Photo.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6153 2012-09-25 17:26 2009-02-16 Show GitHub Exploit DB Packet Storm
189575 7.5 危険 joomlaapps - Joomla! 用の mDigg コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6149 2012-09-25 17:26 2009-02-16 Show GitHub Exploit DB Packet Storm
189576 7.5 危険 owentechkenya - OwenPoll における管理者のアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6143 2012-09-25 17:26 2009-02-16 Show GitHub Exploit DB Packet Storm
189577 7.5 危険 ozsari - Full PHP Emlak Script の arsaprint.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6133 2012-09-25 17:26 2009-02-13 Show GitHub Exploit DB Packet Storm
189578 6 警告 mozilo - moziloWiki におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-6131 2012-09-25 17:26 2009-02-13 Show GitHub Exploit DB Packet Storm
189579 4.3 警告 mozilo - moziloWiki の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6130 2012-09-25 17:26 2009-02-13 Show GitHub Exploit DB Packet Storm
189580 4.3 警告 mozilo - moziloWiki の print.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6129 2012-09-25 17:26 2009-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
711 - - - In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no addit… - CVE-2024-49736 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
712 - - - A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to c… - CVE-2023-37035 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
713 - - - A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary shell commands. The vulnerability arises when defining ale… - CVE-2025-23196 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
714 - - - An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious XML entities. This vulnerability occurs due to insecure parsing of XML input … - CVE-2025-23195 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
715 - - - A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users to inject and execute arbitrary code. The vulnerability occurs when processin… - CVE-2024-51941 2025-01-23 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
716 - - - The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which cou… - CVE-2024-9020 2025-01-23 00:15 2025-01-18 Show GitHub Exploit DB Packet Storm
717 4.3 MEDIUM
Network 		microsoft windows_server_2008
windows_server_2012
windows_server_2025
windows_server_2022_23h2
windows_10_1507
windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows… 		MapUrlToZone Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2025-21329 2025-01-23 00:02 2025-01-15 Show GitHub Exploit DB Packet Storm
718 4.3 MEDIUM
Network 		microsoft windows_server_2008
windows_server_2012
windows_server_2025
windows_server_2022_23h2
windows_10_1507
windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows… 		MapUrlToZone Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2025-21328 2025-01-22 23:59 2025-01-15 Show GitHub Exploit DB Packet Storm
719 6.6 MEDIUM
Physics 		microsoft windows_server_2008
windows_server_2012
windows_server_2025
windows_server_2022_23h2
windows_10_1507
windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows… 		Windows Digital Media Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2025-21327 2025-01-22 23:59 2025-01-15 Show GitHub Exploit DB Packet Storm
720 7.8 HIGH
Local 		microsoft windows_server_2025
windows_server_2022_23h2 		Internet Explorer Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2025-21326 2025-01-22 23:48 2025-01-15 Show GitHub Exploit DB Packet Storm