Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189961 4.3 警告 Kevin Renskers - TYPO3 用の JobControl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6688 2012-09-25 17:27 2009-04-10 Show GitHub Exploit DB Packet Storm
189962 7.5 危険 Jan Bednarik - TYPO3 用の cooluri 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6686 2012-09-25 17:27 2009-04-10 Show GitHub Exploit DB Packet Storm
189963 7.5 危険 marc melvin - A+ PHP Scripts NMS における管理者の権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6667 2012-09-25 17:27 2009-04-8 Show GitHub Exploit DB Packet Storm
189964 4.3 警告 kronos - Kronos webTA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6666 2012-09-25 17:27 2009-04-8 Show GitHub Exploit DB Packet Storm
189965 6.8 警告 ozerov - Alexey Ozerov BigDump の bigdump.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2008-6660 2012-09-25 17:27 2009-04-7 Show GitHub Exploit DB Packet Storm
189966 7.5 危険 openautoclassifieds - Open Auto Classifieds における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6656 2012-09-25 17:27 2009-04-7 Show GitHub Exploit DB Packet Storm
189967 7.5 危険 InsaneVisions - OneCMS の asd.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6652 2012-09-25 17:27 2009-04-7 Show GitHub Exploit DB Packet Storm
189968 10 危険 oxyproject - OxYProject OxYBox の edithistory.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6651 2012-09-25 17:27 2009-04-7 Show GitHub Exploit DB Packet Storm
189969 5 警告 mywebland - miniBloggie の del.php における任意の投稿を削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6650 2012-09-25 17:27 2009-04-7 Show GitHub Exploit DB Packet Storm
189970 7.5 危険 Ktools.net LLC. - Ktools PhotoStore の manager/image_details_editor.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6649 2012-09-25 17:27 2009-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1911 - - - Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. - CVE-2022-1736 2025-02-8 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1912 - - - Users can consume unlimited disk space in /var/crash - CVE-2022-28653 2025-02-8 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1913 5.3 MEDIUM
Network 		liquidweb event_tickets The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.18.1 via the tc-order-id parameter due to missing val… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-13457 2025-02-8 00:34 2025-01-30 Show GitHub Exploit DB Packet Storm
1914 - - - An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE s… CWE-79
Cross-site Scripting 		CVE-2024-10383 2025-02-8 00:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1915 - - - Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To explo… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2025-1108 2025-02-7 23:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1916 - - - Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker to change another user's password without knowing their current password. To exp… CWE-620
 Unverified Password Change 		CVE-2025-1107 2025-02-7 23:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1917 9.8 CRITICAL
Network 		angeljudesuarez tailoring_management_system A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id… CWE-89
SQL Injection 		CVE-2025-0872 2025-02-7 23:07 2025-01-31 Show GitHub Exploit DB Packet Storm
1918 9.8 CRITICAL
Network 		angeljudesuarez tailoring_management_system A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipul… CWE-89
SQL Injection 		CVE-2025-0873 2025-02-7 23:05 2025-01-31 Show GitHub Exploit DB Packet Storm
1919 9.8 CRITICAL
Network 		angeljudesuarez tailoring_management_system A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file deldoc.php. The manipulation of the ar… CWE-89
SQL Injection 		CVE-2025-0943 2025-02-7 23:03 2025-02-1 Show GitHub Exploit DB Packet Storm
1920 9.8 CRITICAL
Network 		angeljudesuarez tailoring_management_system A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file customerview.php. The manipulation of … CWE-89
SQL Injection 		CVE-2025-0944 2025-02-7 23:02 2025-02-1 Show GitHub Exploit DB Packet Storm