Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189771 7.5 危険 katywhitton - Katy Whitton の BlogIt! の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0334 2012-09-25 17:27 2009-01-29 Show GitHub Exploit DB Packet Storm
189772 4.3 警告 ninjadesigns - Ninja Blog の entries/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0325 2012-09-25 17:27 2009-01-29 Show GitHub Exploit DB Packet Storm
189773 6.9 警告 kegel - winetricks における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-0313 2012-09-25 17:27 2009-01-27 Show GitHub Exploit DB Packet Storm
189774 7.2 危険 Novell
openSUSE project		 - SUSE openSUSE の SUSE blinux におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0310 2012-09-25 17:27 2009-02-17 Show GitHub Exploit DB Packet Storm
189775 9.3 危険 MW6 Technologies - Barcode.MW6Barcode.1 などにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0298 2012-09-25 17:27 2009-01-27 Show GitHub Exploit DB Packet Storm
189776 6.8 警告 itlpoll - ITLPoll の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0295 2012-09-25 17:27 2009-01-27 Show GitHub Exploit DB Packet Storm
189777 7.5 危険 OpenX - OpenX の fc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0291 2012-09-25 17:27 2009-01-27 Show GitHub Exploit DB Packet Storm
189778 2.6 注意 opengoo - OpenGoo の upgrade/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0286 2012-09-25 17:27 2009-01-27 Show GitHub Exploit DB Packet Storm
189779 7.5 危険 pardalcms - Pardal CMS の comentar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0279 2012-09-25 17:27 2009-01-27 Show GitHub Exploit DB Packet Storm
189780 5 警告 ISC, Inc. - ISC BIND における証明書チェーンの検証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0265 2012-09-25 17:27 2009-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 4.7 MEDIUM
Network 		- - A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the function getBeanName of the component Whitelist. The manipulation leads to des… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2025-0734 2025-01-28 04:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1072 - - - Cacti is an open source performance and fault management framework. Some of the data stored in automation_tree_rules.php is not thoroughly checked and is used to concatenate the SQL statement in buil… - CVE-2025-24368 2025-01-28 04:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1073 - - - Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web ro… - CVE-2025-24367 2025-01-28 04:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1074 9.8 CRITICAL
Network 		sonicwall sma8200v
sma6200_firmware
sma6210_firmware
sma7200_firmware
sma7210_firmware
sra_ex6000_firmware
sra_ex7000_firmware
sra_ex9000_firmware 		Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific condit… - CVE-2025-23006 2025-01-28 03:41 2025-01-23 Show GitHub Exploit DB Packet Storm
1075 - - - vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim o… CWE-284
Improper Access Control 		CVE-2025-24365 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1076 - - - vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code … CWE-74
Injection 		CVE-2025-24364 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1077 - - - vLLM is a library for LLM inference and serving. vllm/model_executor/weight_utils.py implements hf_model_weights_iterator to load the model checkpoint, which is downloaded from huggingface. It uses t… CWE-502
 Deserialization of Untrusted Data 		CVE-2025-24357 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1078 - - - fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peer… CWE-405
 Asymmetric Resource Consumption (Amplification) 		CVE-2025-24356 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1079 - - - imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose servi… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2025-24354 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1080 - - - matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. When Hookshot 6 version 6.0.1 or below, or Hookshot 5 version 5.4.1 or below, is configured wi… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2025-23197 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm