Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190791 7.5 危険 Joomla! - Joomla! 用の Simple Shop Galore コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2568 2012-09-25 17:17 2008-06-6 Show GitHub Exploit DB Packet Storm
190792 4.3 警告 php-address book - PHP Address Book におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2566 2012-09-25 17:17 2008-06-6 Show GitHub Exploit DB Packet Storm
190793 7.5 危険 php-address book - PHP Address Book における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2565 2012-09-25 17:17 2008-06-6 Show GitHub Exploit DB Packet Storm
190794 7.5 危険 Joomla! - Joomla! 用の JotLoader コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2564 2012-09-25 17:17 2008-06-6 Show GitHub Exploit DB Packet Storm
190795 7.5 危険 hessel brouwer - PHP Visit Counter の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2556 2012-09-25 17:17 2008-06-5 Show GitHub Exploit DB Packet Storm
190796 9.3 危険 icona - Icona の SpA C6 Messenger の DownloaderActiveX コントロールにおける任意のファイルのダウンロードを強制される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2551 2012-09-25 17:17 2008-06-4 Show GitHub Exploit DB Packet Storm
190797 9.3 危険 Motorola Solutions, Inc - Motorola 携帯電話の EXIF パーサにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2548 2012-09-25 17:17 2008-06-4 Show GitHub Exploit DB Packet Storm
190798 9.3 危険 マイクロソフト - Microsoft Windows Installer の msiexec.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2547 2012-09-25 17:17 2008-06-4 Show GitHub Exploit DB Packet Storm
190799 6.8 警告 nasa ames research center - NASA Ames Research Center BigView におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2542 2012-09-25 17:17 2008-06-5 Show GitHub Exploit DB Packet Storm
190800 7.5 危険 hispah - HispaH Model Search の cat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2537 2012-09-25 17:17 2008-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 30, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
951 - - - In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution… - CVE-2024-43096 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
952 - - - In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileg… - CVE-2024-43095 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
953 - - - In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional … - CVE-2024-34730 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
954 - - - In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of … - CVE-2023-40132 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
955 - - - In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional … - CVE-2023-40108 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
956 7.5 HIGH
Network 		- - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unau… - CVE-2025-21549 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
957 6.4 MEDIUM
Network 		- - Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows high pr… - CVE-2025-21548 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
958 9.1 CRITICAL
Network 		- - Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.19.20, 5.6.25.8, 5.6.26.6 and 5.6… - CVE-2025-21547 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
959 7.5 HIGH
Network 		- - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability… - CVE-2025-21545 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
960 3.8 LOW
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. … - CVE-2025-21546 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm