Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190191 6.5 警告 knowledgetree document management - KnowledgeTree の DropDocuments プラグインにおける管理者権限を取得される脆弱性 CWE-DesignError
CVE-2008-5857 2012-09-25 17:26 2008-12-15 Show GitHub Exploit DB Packet Storm
190192 7.5 危険 igamingcms - iGaming における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5841 2012-09-25 17:26 2009-01-5 Show GitHub Exploit DB Packet Storm
190193 7.5 危険 ノキア - Nokia 6131 NFC 電話における任意のコードを実行される脆弱性 CWE-16
環境設定 		CVE-2008-5827 2012-09-25 17:26 2009-01-2 Show GitHub Exploit DB Packet Storm
190194 7.8 危険 ノキア - Nokia 6131 NFC 電話におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5826 2012-09-25 17:26 2009-01-2 Show GitHub Exploit DB Packet Storm
190195 2.6 注意 ノキア - NFC 電話上で稼動する SmartPoster 実装におけるユーザを騙して任意の URI 読み込ませる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5825 2012-09-25 17:17 2009-01-2 Show GitHub Exploit DB Packet Storm
190196 7.5 危険 ILIAS - ILIAS の repository.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5816 2012-09-25 17:17 2009-01-2 Show GitHub Exploit DB Packet Storm
190197 5 警告 lovecms - LoveCMS の system/admin/images.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5794 2012-09-25 17:17 2008-12-31 Show GitHub Exploit DB Packet Storm
190198 6.8 警告 indisguise - Indiscripts Enthusiast の show_joined.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5792 2012-09-25 17:17 2008-12-31 Show GitHub Exploit DB Packet Storm
190199 4.3 警告 infrae - Silva の Silva Find 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5786 2012-09-25 17:17 2008-11-7 Show GitHub Exploit DB Packet Storm
190200 5 警告 hostforest - Forest Blog におけるパスワードを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5780 2012-09-25 17:17 2008-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1861 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a 64-bi… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-21665 2025-02-4 04:57 2025-01-31 Show GitHub Exploit DB Packet Storm
1862 - - - Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/proc_get endpoint. The vulnerability allows an attacker to manipulate SQL queries by injecting malicio… - CVE-2024-57238 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1863 - - - Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the /reqproc/proc_get endpoint. The vulnerability arises because the cmd parameter does not properly sani… - CVE-2024-57237 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1864 - - - Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiti… - CVE-2024-57004 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1865 - - - Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial. - CVE-2024-57510 2025-02-4 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1866 - - - The specific component in Celk Saude 3.1.252.1 that processes user input and returns error messages to the client is vulnerable due to improper validation or sanitization of the "erro" parameter. Thi… - CVE-2024-48761 2025-02-4 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1867 - - - PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping. - CVE-2024-57967 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1868 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-54840. Reason: This candidate is a reservation duplicate of CVE-2024-54840. Notes: All CVE users should reference CVE-2024-5484… - CVE-2024-57362 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1869 - - - A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php. - CVE-2024-57175 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1870 - - - PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection. - CVE-2024-54840 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm