Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190811 6.8 警告 ourvideo cms - Ourvideo CMS の phpi/rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2978 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190812 7.5 危険 ourvideo cms - Ourvideo CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2977 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190813 6.8 警告 mm chat - MM Chat の chatconfig.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2974 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190814 4.3 警告 mm chat - MM Chat の chathead.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2973 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190815 7.5 危険 kblance.com - KbLance の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2972 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190816 7.5 危険 jaxultrabb - JaxUltraBB の viewprofile.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2966 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190817 4.3 警告 jaxbot - JUBB の viewforum.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2965 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190818 6.8 警告 myblog - MyBlog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2963 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190819 4.3 警告 myblog - MyBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2962 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
190820 9.3 危険 マイクロソフト - Microsoft Visual Basic Enterprise Edition 6.0 SP6 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2959 2012-09-25 17:17 2008-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 - - - An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to access the import / export fun… - CVE-2021-41528 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
2012 - - - An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. The vulnerability requires that the 2FA … - CVE-2021-41527 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
2013 - - - Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release. - CVE-2021-27017 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
2014 - - - vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere wit… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2025-25183 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
2015 7.1 HIGH
Local 		dell data_domain_operating_system Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially exploit this vulnerability to gain unaut… CWE-22
Path Traversal 		CVE-2024-51534 2025-02-8 04:58 2025-02-1 Show GitHub Exploit DB Packet Storm
2016 4.9 MEDIUM
Network 		dell data_domain_operating_system Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high privileged attacker with remote access could potentially expl… CWE-787
 Out-of-bounds Write 		CVE-2024-53296 2025-02-8 04:54 2025-02-1 Show GitHub Exploit DB Packet Storm
2017 5.4 MEDIUM
Network 		- - A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads… CWE-22
Path Traversal 		CVE-2025-1106 2025-02-8 04:15 2025-02-8 Show GitHub Exploit DB Packet Storm
2018 - - - Tiny File Manager v2.4.7 and below is vulnerable to session fixation. - CVE-2022-40916 2025-02-8 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm
2019 4.3 MEDIUM
Network 		- - A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP … CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1105 2025-02-8 03:15 2025-02-8 Show GitHub Exploit DB Packet Storm
2020 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2025-0307 2025-02-8 03:15 2025-02-8 Show GitHub Exploit DB Packet Storm