Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191471 7.2 危険 マイクロソフト - Microsoft Windows XP 用の I2O Utility Filter ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0322 2012-09-25 16:59 2008-05-13 Show GitHub Exploit DB Packet Storm
191472 7.5 危険 mapbender - Mapbender における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0301 2012-09-25 16:59 2008-03-11 Show GitHub Exploit DB Packet Storm
191473 6.8 警告 mapbender - Mapbender の mapFiler.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-0300 2012-09-25 16:59 2008-03-11 Show GitHub Exploit DB Packet Storm
191474 7.8 危険 Linux - Linux kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0352 2012-09-25 16:59 2007-05-8 Show GitHub Exploit DB Packet Storm
191475 5 警告 Mozilla Foundation - Mozilla Firefox におけるフィッシング攻撃などを実行される脆弱性 CWE-200
情報漏えい
CVE-2008-0367 2012-09-25 16:59 2004-05-21 Show GitHub Exploit DB Packet Storm
191476 5 警告 keil-software - PhotoKorn におけるデータベース資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-0297 2012-09-25 16:59 2008-01-16 Show GitHub Exploit DB Packet Storm
191477 7.5 危険 hangzhou rui-qiang - RichStrong CMS の showproduct.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0291 2012-09-25 16:59 2008-01-16 Show GitHub Exploit DB Packet Storm
191478 6.8 警告 mansion productions - MAS の view_func.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0289 2012-09-25 16:59 2008-01-15 Show GitHub Exploit DB Packet Storm
191479 7.5 危険 imagealbum - ImageAlbum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0288 2012-09-25 16:59 2008-01-15 Show GitHub Exploit DB Packet Storm
191480 5 警告 Alexander Barton - ngIRCd におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-0285 2012-09-25 16:59 2008-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1401 3.7 LOW
Network
- - A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP G… CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2025-0730 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1402 5.9 MEDIUM
Network
- - IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithm… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-27256 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1403 - - - Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the `Poller Standard Error Log Path` parameter in either Installation Step 5 or in Con… CWE-22
Path Traversal
CVE-2024-45598 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1404 5.9 MEDIUM
Network
- - IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. … CWE-311
Missing Encryption of Sensitive Data
CVE-2024-38325 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1405 5.9 MEDIUM
Network
- - IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that cou… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-38320 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1406 5.4 MEDIUM
Network
- - IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intende… CWE-79
Cross-site Scripting
CVE-2024-37527 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1407 4.3 MEDIUM
Network
- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls. CWE-284
Improper Access Control
CVE-2024-22316 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1408 6.4 MEDIUM
Network
- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… CWE-79
Cross-site Scripting
CVE-2023-52292 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1409 4.3 MEDIUM
Network
- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. CWE-204
 Response Discrepancy Information Exposure
CVE-2023-47159 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1410 - - - DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wps_… - CVE-2024-57595 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm