Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189751 6.8 警告 onlinegrades - Online Grades の parents/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0452 2012-09-25 17:27 2009-02-5 Show GitHub Exploit DB Packet Storm
189752 7.2 危険 カスペルスキー - Kaspersky Anti-Virus の klim5.sys におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0449 2012-09-25 17:27 2009-02-10 Show GitHub Exploit DB Packet Storm
189753 7.2 危険 IBM - WAS で使用される IBM HTTP Server の mod_ibm_ssl モジュールなどにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0436 2012-09-25 17:27 2009-02-10 Show GitHub Exploit DB Packet Storm
189754 7.5 危険 kevin walker - PHPPA の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0423 2012-09-25 17:27 2009-02-4 Show GitHub Exploit DB Packet Storm
189755 3.7 注意 monkey - trickle における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-0415 2012-09-25 17:27 2009-02-3 Show GitHub Exploit DB Packet Storm
189756 7.5 危険 interspire - ISC の class.auth.php の ProcessLogin 関数における管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-0412 2012-09-25 17:27 2009-02-3 Show GitHub Exploit DB Packet Storm
189757 6.8 警告 mzbservices - Max.Blog の offline_auth.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0409 2012-09-25 17:27 2009-02-3 Show GitHub Exploit DB Packet Storm
189758 6 警告 osCommerce - osCommerce におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0408 2012-09-25 17:27 2009-02-3 Show GitHub Exploit DB Packet Storm
189759 7.5 危険 humayun shabbir - PHP-CMS Project の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0407 2012-09-25 17:27 2009-02-3 Show GitHub Exploit DB Packet Storm
189760 7.5 危険 NetArt Media - NetArt Media Car Portal のログイン機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0395 2012-09-25 17:27 2009-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1131 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nurul Amin, Mohammad Saiful Islam WP Smart Tooltip allows Stored XSS. This issue affects WP Smart… CWE-79
Cross-site Scripting 		CVE-2025-23669 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1132 - - - Missing Authorization vulnerability in Saul Morales Pacheco Donate visa allows Stored XSS. This issue affects Donate visa: from n/a through 1.0.0. CWE-862
 Missing Authorization 		CVE-2025-23656 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1133 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Lau CubePM allows Reflected XSS. This issue affects CubePM: from n/a through 1.0. CWE-79
Cross-site Scripting 		CVE-2025-23574 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1134 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David F. Carr RSVPMaker Volunteer Roles allows Reflected XSS. This issue affects RSVPMaker Volunt… CWE-79
Cross-site Scripting 		CVE-2025-23531 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1135 - - - Missing Authorization vulnerability in Blokhaus Minterpress allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Minterpress: from n/a through 1.0.5. CWE-862
 Missing Authorization 		CVE-2025-23529 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1136 - - - The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary menu via a CSRF attack - CVE-2024-12774 2025-01-28 00:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1137 7.5 HIGH
Network 		linuxfoundation magma The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container function at /nas/ie… CWE-787
 Out-of-bounds Write 		CVE-2024-24423 2025-01-27 23:39 2025-01-22 Show GitHub Exploit DB Packet Storm
1138 7.5 HIGH
Network 		linuxfoundation magma Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage … CWE-617
 Reachable Assertion 		CVE-2023-37029 2025-01-27 23:39 2025-01-22 Show GitHub Exploit DB Packet Storm
1139 6.5 MEDIUM
Adjacent 		linuxfoundation magma A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to c… CWE-476
 NULL Pointer Dereference 		CVE-2023-37037 2025-01-27 23:34 2025-01-22 Show GitHub Exploit DB Packet Storm
1140 6.5 MEDIUM
Adjacent 		linuxfoundation magma A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to c… CWE-476
 NULL Pointer Dereference 		CVE-2023-37034 2025-01-27 23:34 2025-01-22 Show GitHub Exploit DB Packet Storm