Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190911 7.5 危険 peercast - Peercast の HTTP::getAuthUserPass 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2040 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
190912 6.8 警告 miniBB - miniBB の setup_mysql.php などにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2029 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
190913 4.3 警告 miniBB - miniBB におけるフルパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2028 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
190914 4.3 警告 miniBB - miniBB の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2024 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
190915 7.5 危険 pd9 software - PD9 Software の MegaBBS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2023 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
190916 4.3 警告 pd9 software - PD9 Software MegaBBS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2022 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
190917 5 警告 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2014 2012-09-25 17:16 2008-04-29 Show GitHub Exploit DB Packet Storm
190918 4.3 警告 national rail enquiries - National Rail Enquiries Live Departure Boards ガジェットにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2011 2012-09-25 17:16 2008-04-29 Show GitHub Exploit DB Packet Storm
190919 7.8 危険 Motorola Solutions, Inc - Motorola Surfboard におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2002 2012-09-25 17:16 2008-04-28 Show GitHub Exploit DB Packet Storm
190920 8.5 危険 IBM - IBM DB2 の NNSTAT プロシージャにおける任意のファイルを上書きされる脆弱性 CWE-DesignError
CVE-2008-1998 2012-09-25 17:16 2008-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 30, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
861 - - - lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0. - CVE-2024-57719 2025-01-24 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
862 - - - In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due t… - CVE-2024-55957 2025-01-24 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
863 - - - Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same… - CVE-2025-24400 2025-01-24 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
864 - - - Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins instances configure… - CVE-2025-24399 2025-01-24 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
865 - - - Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `UE Context Release Request` packet handler. A packet containing an invalid `MME_UE_S1AP_ID` field causes Open5gs to crash; an attac… - CVE-2023-37022 2025-01-24 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
866 - - - Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Release Request` message mi… - CVE-2023-37014 2025-01-24 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
867 - - - A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to cr… - CVE-2023-37039 2025-01-24 00:15 2025-01-22 Show GitHub Exploit DB Packet Storm
868 5.5 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uyumsoft Informatin Systems Uyumsoft ERP allows XSS Using Invalid Characters, Reflected XS… CWE-79
Cross-site Scripting 		CVE-2024-10539 2025-01-23 23:15 2025-01-23 Show GitHub Exploit DB Packet Storm
869 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the si… - CVE-2024-57947 2025-01-23 23:15 2025-01-23 Show GitHub Exploit DB Packet Storm
870 6.1 MEDIUM
Network 		- - The SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 0.4.8 d… CWE-79
Cross-site Scripting 		CVE-2024-13422 2025-01-23 21:15 2025-01-23 Show GitHub Exploit DB Packet Storm