Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190031 8.8 危険 jun sota - FFFTP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6424 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
190032 5 警告 i-apps - PassWiki の passwiki.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6423 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
190033 7.5 危険 openrat - OpenRat の themes/default/include/html/insert.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6403 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
190034 7.5 危険 muskatli - Sofi WebGui における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6402 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
190035 7.5 危険 jetik - JETIK-WEB の sayfa.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6401 2012-09-25 17:27 2009-03-6 Show GitHub Exploit DB Packet Storm
190036 7.5 危険 nexusjnr - Jbook の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6391 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
190037 7.5 危険 ocean12tech - Ocean12 Membership Manager Pro の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6390 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
190038 7.5 危険 mxmania - Gallery MX の pics_pre.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6379 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
190039 7.5 危険 mxmania - Calendar Mx Professional の calendar_Eventupdate.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6378 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
190040 7.5 危険 nexusjnr - Jbook の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6376 2012-09-25 17:27 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 - - - Missing Authorization vulnerability in mikemmx Super Block Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Super Block Slider: from n/a through 2.7.… CWE-862
 Missing Authorization 		CVE-2025-24682 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1082 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce allows Stored XSS. This issue affec… CWE-79
Cross-site Scripting 		CVE-2025-24681 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1083 - - - Missing Authorization vulnerability in webraketen Internal Links Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Internal Links Manager: from n/a t… CWE-862
 Missing Authorization 		CVE-2025-24679 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1084 - - - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Listamester Listamester allows Stored XSS. This issue affects Listamester: from n/a through 2.3.4. CWE-80
Basic XSS 		CVE-2025-24678 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1085 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osamaesh WP Visitor Statistics (Real Time Traffic) allows Stored XSS. This issue affects WP Visit… CWE-79
Cross-site Scripting 		CVE-2025-24675 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1086 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Teplitsa. Technologies for Social Good ShMapper by Teplitsa allows Stored XSS. This issue affects… CWE-79
Cross-site Scripting 		CVE-2025-24674 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1087 - - - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in AyeCode Ltd Ketchup Shortcodes allows Stored XSS. This issue affects Ketchup Shortcodes: from n/a throug… CWE-80
Basic XSS 		CVE-2025-24673 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1088 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodePeople Form Builder CP allows SQL Injection. This issue affects Form Builder CP: from n/a thr… CWE-89
SQL Injection 		CVE-2025-24672 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1089 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SERPed SERPed.net allows SQL Injection. This issue affects SERPed.net: from n/a through 4.4. CWE-89
SQL Injection 		CVE-2025-24669 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1090 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle PPOM for WooCommerce allows Stored XSS. This issue affects PPOM for WooCommerce: from n… CWE-79
Cross-site Scripting 		CVE-2025-24668 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm