Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190251 4.3 警告 kkeim - Kmita Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5068 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190252 4.3 警告 kkeim - Kmita Catalogue の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5067 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190253 7.5 危険 h&h - H&H の WebSoccer の liga.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5064 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190254 10 危険 otmanager - OTManager の Admin/ADM_Pagina.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5063 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190255 10 危険 modernbill - ModernBill における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5060 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190256 4.3 警告 modernbill - ModernBill の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5059 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190257 10 危険 Joomla! - Joomla! 用の Simple RSS Reader における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5053 2012-09-25 17:17 2008-11-13 Show GitHub Exploit DB Packet Storm
190258 7.5 危険 jooblog - Joomla! 用の jb2 コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5051 2012-09-25 17:17 2008-11-12 Show GitHub Exploit DB Packet Storm
190259 7.2 危険 isecsoft - ISecSoft Anti-Keylogger Elite の AKEProtect.sys におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5049 2012-09-25 17:17 2008-11-12 Show GitHub Exploit DB Packet Storm
190260 7.2 危険 isecsoft - ISecSoft Anti-Trojan Elite の Atepmon.sys におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5048 2012-09-25 17:17 2008-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
961 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alessandro Benoit WpDevTool allows Reflected XSS. This issue affects WpDevTool: from n/a through … CWE-79
Cross-site Scripting 		CVE-2025-23624 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
962 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Navnish Bhardwaj WP Social Broadcast allows Reflected XSS. This issue affects WP Social Broadcast… CWE-79
Cross-site Scripting 		CVE-2025-23545 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
963 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in heart5 StatPressCN allows Reflected XSS. This issue affects StatPressCN: from n/a through 1.9.1. CWE-79
Cross-site Scripting 		CVE-2025-23544 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
964 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in edmon Download, Downloads allows Reflected XSS. This issue affects Download, Downloads : from n/… CWE-79
Cross-site Scripting 		CVE-2025-23541 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
965 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohsin khan WP Front-end login and register allows Reflected XSS. This issue affects WP Front-end… CWE-79
Cross-site Scripting 		CVE-2025-23540 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
966 - - - Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Media Library Mime Type allows Stored XSS. This issue affects Rocket Media Library Mime Type: from n/a through 2.1.0. CWE-352
 Origin Validation Error 		CVE-2025-22768 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
967 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tarak Patel WP Query Creator allows Reflected XSS. This issue affects WP Query Creator: from n/a … CWE-79
Cross-site Scripting 		CVE-2025-22264 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
968 - - - It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authenticatio… CWE-287
Improper Authentication 		CVE-2025-0637 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
969 - - - SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server. - CVE-2024-55971 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
970 - - - ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection. - CVE-2024-52325 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm