Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190131 7.5 危険 Owl Intranet Engine - Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3359 2012-09-25 17:17 2008-07-29 Show GitHub Exploit DB Packet Storm
190132 7.2 危険 ingres - Linux 上などの Ingres の ingvalidpw における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3357 2012-09-25 17:17 2008-08-1 Show GitHub Exploit DB Packet Storm
190133 4.6 警告 ingres - Linux 上などで Ingres の verifydb における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3356 2012-09-25 17:17 2008-08-1 Show GitHub Exploit DB Packet Storm
190134 7.5 危険 nersoft - Live Music Plus の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3352 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
190135 4.3 警告 myiosoft - MyioSoft EasyDynamicPages におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3348 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
190136 7.5 危険 myiosoft - MyioSoft EasyDynamicPages における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3347 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
190137 6.8 警告 myiosoft - MyioSoft EasyE-Cards の staticpages/easyecards/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3345 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
190138 4.3 警告 myiosoft - MyioSoft EasyE-Cards trial edition (tr) の staticpages/easyecards/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3344 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
190139 7.5 危険 myiosoft - MyioSoft EasyPublish の staticpages/easypublish/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3343 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
190140 4.3 警告 myiosoft - MyioSoft EasyPublish におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3342 2012-09-25 17:17 2008-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitat… Update CWE-787
 Out-of-bounds Write 		CVE-2025-21139 2025-01-22 02:50 2025-01-15 Show GitHub Exploit DB Packet Storm
622 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… Update CWE-787
 Out-of-bounds Write 		CVE-2025-21138 2025-01-22 02:49 2025-01-15 Show GitHub Exploit DB Packet Storm
623 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitat… Update CWE-787
 Out-of-bounds Write 		CVE-2025-21137 2025-01-22 02:49 2025-01-15 Show GitHub Exploit DB Packet Storm
624 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… Update CWE-787
 Out-of-bounds Write 		CVE-2025-21136 2025-01-22 02:49 2025-01-15 Show GitHub Exploit DB Packet Storm
625 7.8 HIGH
Local 		adobe illustrator Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… Update CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2025-21133 2025-01-22 02:49 2025-01-15 Show GitHub Exploit DB Packet Storm
626 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTR_CTIME flags when setting mtime David reported that the new warning from setattr_copy_mgtime is coming like the fo… Update NVD-CWE-noinfo
CVE-2024-57895 2025-01-22 02:47 2025-01-15 Show GitHub Exploit DB Packet Storm
627 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nf_register_net_hooks() syzbot found a race in ila_add_mapping() [1] commit 031ae72825ce ("ila: call nf_… Update CWE-416
 Use After Free 		CVE-2024-57900 2025-01-22 02:45 2025-01-15 Show GitHub Exploit DB Packet Storm
628 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount During the unmount path, at close_ctree(), we … Update CWE-416
 Use After Free 		CVE-2024-57896 2025-01-22 02:45 2025-01-15 Show GitHub Exploit DB Packet Storm
629 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-u… Update CWE-416
 Use After Free 		CVE-2024-57892 2025-01-22 02:41 2025-01-15 Show GitHub Exploit DB Packet Storm
630 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqe_size * cmd.wr_count", both variables are u32 values that c… Update CWE-190
 Integer Overflow or Wraparound 		CVE-2024-57890 2025-01-22 02:41 2025-01-15 Show GitHub Exploit DB Packet Storm