Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191301 7.5 危険 Joomla! - Joomla! 用の PccookBook における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0844 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191302 7.5 危険 Joomla! - Joomla! 用の Classifier における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0842 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191303 7.5 危険 Mambo Foundation
Joomla!		 - Joomla! および Mambo 用の Giorgio Nordo Ricette における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0841 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191304 4.3 警告 John Godley
WordPress.org		 - WordPress 用の John Godley Search Unleashed プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0837 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191305 4.3 警告 IBM - i5/OS の Lotus Quickr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0834 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191306 7.5 危険 Joomla! - Joomla! 用の com_galeria コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0833 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191307 7.5 危険 Mambo Foundation
Joomla!		 - Mambo および Joomla! 用の Kemas Antonius com_quran における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0832 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
191308 7.5 危険 Mambo Foundation
joomlapixel		 - Joomla! および Mambo 用の com_jooget コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0829 2012-09-25 16:59 2008-02-19 Show GitHub Exploit DB Packet Storm
191309 7.5 危険 osi codes inc. - OSI Codes Inc. PHP Live! の admin/traffic/knowledge_searchm.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0821 2012-09-25 16:59 2008-02-19 Show GitHub Exploit DB Packet Storm
191310 7.5 危険 Mambo Foundation
Joomla!		 - Joomla! および Mambo 用の com_filebase コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0817 2012-09-25 16:59 2008-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 5, 2025, 4:56 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 - - - Missing Authorization vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Store Kit Elem… CWE-862
 Missing Authorization 		CVE-2025-24584 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1082 - - - Cross-Site Request Forgery (CSRF) vulnerability in MetaSlider Responsive Slider by MetaSlider allows Cross Site Request Forgery. This issue affects Responsive Slider by MetaSlider: from n/a through 3… CWE-352
 Origin Validation Error 		CVE-2025-24533 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1083 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Busters Passwordless WP – Login with your glance or fingerprint allows Reflected XSS. This iss… CWE-79
Cross-site Scripting 		CVE-2025-23792 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1084 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Clodeo Shipdeo allows Reflected XSS. This issue affects Shipdeo: from n/a through 1.2.8. CWE-79
Cross-site Scripting 		CVE-2025-23457 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1085 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Simple Locator allows Reflected XSS. This issue affects Simple Locator: from n/a through… CWE-79
Cross-site Scripting 		CVE-2025-22513 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1086 - - - Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by … - CVE-2024-11348 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1087 8.9 HIGH
Network 		- - A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end gener… CWE-79
Cross-site Scripting 		CVE-2022-4975 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1088 - - - A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON a… CWE-476
 NULL Pointer Dereference 		CVE-2025-0696 2025-01-27 20:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1089 - - - An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2025-0695 2025-01-27 20:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1090 4.4 MEDIUM
Local 		- - A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The m… CWE-404
CWE-400
 Improper Resource Shutdown or Release
 Uncontrolled Resource Consumption 		CVE-2024-12345 2025-01-27 20:15 2025-01-27 Show GitHub Exploit DB Packet Storm