Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189811 7.5 危険 ocean12tech - Ocean12 Membership Manager Pro の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6390 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189812 7.5 危険 mxmania - Gallery MX の pics_pre.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6379 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189813 7.5 危険 mxmania - Calendar Mx Professional の calendar_Eventupdate.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6378 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189814 7.5 危険 nexusjnr - Jbook の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6376 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189815 5 警告 nexusjnr - JBook におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6375 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189816 5 警告 Nagios Enterprises, LLC - Nagios における脆弱性 CWE-94
コード・インジェクション
CVE-2008-6373 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189817 7.5 危険 ocean12tech - Ocean12 FAQ Manager Pro の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6372 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189818 7.5 危険 ocean12tech - Ocean12 Membership Manager Pro の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6371 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189819 4.3 警告 ocean12tech - Ocean12 Contact Manager Pro の default.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6370 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
189820 7.5 危険 ocean12tech - Ocean12 Contact Manager Pro の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6369 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 29, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
491 - - - Server-Side Request Forgery (SSRF) vulnerability in HasThemes Extensions For CF7 allows Server Side Request Forgery. This issue affects Extensions For CF7: from n/a through 3.2.0. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-24695 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
492 - - - Missing Authorization vulnerability in Yehi Advanced Notifications allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Notifications: from n/a through… CWE-862
 Missing Authorization
CVE-2025-24693 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
493 - - - Missing Authorization vulnerability in Gagan Sandhu , Enej Bajgoric , CTLT DEV, UBC People Lists allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects People Lis… CWE-862
 Missing Authorization
CVE-2025-24691 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
494 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lars Wallenborn Show/Hide Shortcode allows Stored XSS. This issue affects Show/Hide Shortcode: fr… CWE-79
Cross-site Scripting
CVE-2025-24687 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
495 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill RSVP and Event Management Plugin allows SQL Injection. This issue affects RSVP and Event … CWE-89
SQL Injection
CVE-2025-24683 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
496 - - - Missing Authorization vulnerability in mikemmx Super Block Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Super Block Slider: from n/a through 2.7.… CWE-862
 Missing Authorization
CVE-2025-24682 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
497 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce allows Stored XSS. This issue affec… CWE-79
Cross-site Scripting
CVE-2025-24681 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
498 - - - Missing Authorization vulnerability in webraketen Internal Links Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Internal Links Manager: from n/a t… CWE-862
 Missing Authorization
CVE-2025-24679 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
499 - - - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Listamester Listamester allows Stored XSS. This issue affects Listamester: from n/a through 2.3.4. CWE-80
Basic XSS
CVE-2025-24678 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
500 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osamaesh WP Visitor Statistics (Real Time Traffic) allows Stored XSS. This issue affects WP Visit… CWE-79
Cross-site Scripting
CVE-2025-24675 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm