Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192231	6.8	警告	OpenKM	-	OpenKM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2316	2012-09-12 14:20	2012-01-4	Show	GitHub Exploit DB Packet Storm

192232	4	警告	OpenKM	-	OpenKM における任意のユーザに管理者権限を割り当てられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2315	2012-09-12 14:19	2012-01-4	Show	GitHub Exploit DB Packet Storm

192233	4.3	警告	chatelao	-	PHP Address Book の preferences.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1912	2012-09-12 13:54	2012-09-9	Show	GitHub Exploit DB Packet Storm

192234	7.5	危険	chatelao	-	PHP Address Book における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1911	2012-09-12 13:53	2012-09-9	Show	GitHub Exploit DB Packet Storm

192235	4.9	警告	danielb	-	Drupal 用 Cool Aid モジュールにおける任意のページを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1649	2012-09-12 13:53	2012-02-29	Show	GitHub Exploit DB Packet Storm

192236	2.1	注意	danielb	-	Drupal 用 Cool Aid モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1648	2012-09-12 13:52	2012-02-29	Show	GitHub Exploit DB Packet Storm

192237	5	警告	MediaWiki	-	MediaWiki の wikitext パーサにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-4885	2012-09-12 13:50	2012-03-21	Show	GitHub Exploit DB Packet Storm

192238	4.3	警告	MediaWiki	-	MediaWiki の wikitext パーサにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1582	2012-09-12 13:47	2012-03-21	Show	GitHub Exploit DB Packet Storm

192239	5	警告	MediaWiki	-	MediaWiki における任意のユーザのパスワードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1581	2012-09-12 13:46	2012-03-21	Show	GitHub Exploit DB Packet Storm

192240	6.8	警告	MediaWiki	-	MediaWiki の Special:Upload におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1580	2012-09-12 13:45	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251	-		-	-	Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals. New	-	CVE-2024-29971	2025-01-11 01:15	2025-01-11	Show	GitHub Exploit DB Packet Storm

252	-		-	-	Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals. New	-	CVE-2024-29970	2025-01-11 01:15	2025-01-11	Show	GitHub Exploit DB Packet Storm

253	-		-	-	Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions. New	-	CVE-2024-25371	2025-01-11 01:15	2025-01-11	Show	GitHub Exploit DB Packet Storm

254	-		-	-	FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. New	-	CVE-2025-23022	2025-01-11 01:15	2025-01-11	Show	GitHub Exploit DB Packet Storm

255	-		-	-	An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" G… New	-	CVE-2024-57687	2025-01-11 01:15	2025-01-10	Show	GitHub Exploit DB Packet Storm

256	-		-	-	Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function. New	-	CVE-2024-51229	2025-01-11 01:15	2025-01-10	Show	GitHub Exploit DB Packet Storm

257	-		-	-	Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQ… New	-	CVE-2024-54762	2025-01-11 01:15	2025-01-10	Show	GitHub Exploit DB Packet Storm

258	-		-	-	BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. New	-	CVE-2024-54761	2025-01-11 01:15	2025-01-10	Show	GitHub Exploit DB Packet Storm

259	5.5	MEDIUM Local	qualcomm	ar8035_firmware c-v2x_9150_firmware csrb31024_firmware fastconnect_6800_firmware fastconnect_6900_firmware fastconnect_7800_firmware msm8996au_firmware qam8295p_firmware qca63…	Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. Update	CWE-125 Out-of-bounds Read	CVE-2024-33067	2025-01-11 00:39	2025-01-6	Show	GitHub Exploit DB Packet Storm

260	5.5	MEDIUM Local	qualcomm	qam8255p_firmware qam8295p_firmware qam8650p_firmware qam8775p_firmware qamsrv1h_firmware qca6595_firmware qca6595au_firmware qca6696_firmware qca6698aq_firmware sa8255p_fi…	information disclosure while invoking the mailbox read API. Update	CWE-125 Out-of-bounds Read	CVE-2024-43063	2025-01-11 00:37	2025-01-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed