Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190191 5 警告 nukedit - Nukedit におけるユーザ名などを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5773 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
190192 4.3 警告 Kerio Technologies - Kerio MailServer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5769 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
190193 7.5 危険 mariovaldez - SiTeFiLo の slogin_lib.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5763 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
190194 5 警告 mariovaldez - SiTeFiLo におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5762 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
190195 4.3 警告 Kerio Technologies - Kerio MailServer の error413.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5760 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
190196 9.3 危険 intellitamper - IntelliTamper におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5755 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
190197 6.8 警告 マイクロソフト - Microsoft Internet Explorer 8 における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5750 2012-09-25 17:17 2008-12-29 Show GitHub Exploit DB Packet Storm
190198 4.3 警告 マイクロソフト - Microsoft WMP の DirectShow フレームワークにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-5745 2012-09-25 17:17 2008-12-29 Show GitHub Exploit DB Packet Storm
190199 6.9 警告 pdfjam - pdfjam における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5743 2012-09-25 17:17 2008-12-26 Show GitHub Exploit DB Packet Storm
190200 4 警告 NetCat - AIST NetCat におけるオープンリダイレクトの脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5742 2012-09-25 17:17 2008-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1121 - - - Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was releas… - CVE-2025-23012 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1122 - - - Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JS… - CVE-2025-23011 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1123 - - - Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter. - CVE-2024-57370 2025-01-24 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
1124 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21491 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1125 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21490 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1126 6.1 MEDIUM
Network 		- - Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vu… - CVE-2025-21489 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1127 5.4 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable … - CVE-2024-21245 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1128 7.8 HIGH
Local 		google android In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv… CWE-787
 Out-of-bounds Write 		CVE-2018-9389 2025-01-24 04:56 2025-01-18 Show GitHub Exploit DB Packet Storm
1129 5.5 MEDIUM
Local 		google android In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… CWE-862
 Missing Authorization 		CVE-2018-9406 2025-01-24 04:55 2025-01-18 Show GitHub Exploit DB Packet Storm
1130 5.5 MEDIUM
Local 		google android In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service w… NVD-CWE-noinfo
CVE-2017-13322 2025-01-24 04:54 2025-01-18 Show GitHub Exploit DB Packet Storm