Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194251 4.3 警告 TYPO3 Association
dominic eckart		 - TYPO3 の trainincdb 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4343 2012-06-26 16:18 2009-12-17 Show GitHub Exploit DB Packet Storm
194252 6.8 警告 eocms - eoCMS の js/bbcodepress/bbcode-form.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4319 2012-06-26 16:18 2009-12-14 Show GitHub Exploit DB Packet Storm
194253 7.5 危険 Drupal
brian miller		 - Drupal の Taxonomy Timer モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4296 2012-06-26 16:18 2009-12-11 Show GitHub Exploit DB Packet Storm
194254 6.8 警告 barnraiser - AROUNDMe の components/core/connect.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4264 2012-06-26 16:18 2009-12-10 Show GitHub Exploit DB Packet Storm
194255 4.3 警告 Clixint Technologies - Image Hosting Script DPI の images.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4252 2012-06-26 16:18 2009-12-9 Show GitHub Exploit DB Packet Storm
194256 9.3 危険 コーレル株式会社 - Jasc Paint Shop Pro におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4251 2012-06-26 16:18 2009-12-9 Show GitHub Exploit DB Packet Storm
194257 4.3 警告 korn19
CutePHP		 - CutePHP CuteNews および UTF-8 CuteNews におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4250 2012-06-26 16:18 2009-12-9 Show GitHub Exploit DB Packet Storm
194258 2.6 注意 CutePHP - CutePHP CuteNews におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4249 2012-06-26 16:18 2009-12-9 Show GitHub Exploit DB Packet Storm
194259 7.5 危険 Basic-CMS - SweetRice の as/lib/plugins.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4231 2012-06-26 16:18 2009-12-8 Show GitHub Exploit DB Packet Storm
194260 7.5 危険 Activewebsoftwares - ActiveWebSoftwares Active Bids における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4229 2012-06-26 16:18 2009-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take dev_replace rwsem on task already holding it Running fstests btrfs/011 with MKFS_OPTIONS="-O rst" to force the … New - CVE-2024-48875 2025-01-11 22:15 2025-01-11 Show GitHub Exploit DB Packet Storm
72 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't access invalid sched Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->ba… New - CVE-2024-46896 2025-01-11 22:15 2025-01-11 Show GitHub Exploit DB Packet Storm
73 - - - In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock A deadlock may happen since the i3c_master… New - CVE-2024-43098 2025-01-11 22:15 2025-01-11 Show GitHub Exploit DB Packet Storm
74 - - - In the Linux kernel, the following vulnerability has been resolved: sched: fix warning in sched_setaffinity Commit 8f9ea86fdf99b added some logic to sched_setaffinity that included a WARN when a pe… New - CVE-2024-41932 2025-01-11 22:15 2025-01-11 Show GitHub Exploit DB Packet Storm
75 - - - A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0392 2025-01-11 20:15 2025-01-11 Show GitHub Exploit DB Packet Storm
76 - - - A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgfr… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0391 2025-01-11 18:15 2025-01-11 Show GitHub Exploit DB Packet Storm
77 - - - A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHController.do. The ma… New CWE-23
CWE-24
 Relative Path Traversal
 Path Traversal: '../filedir' 		CVE-2025-0390 2025-01-11 17:15 2025-01-11 Show GitHub Exploit DB Packet Storm
78 - - - HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. This can lead to security vulnerabilities like SQL … New - CVE-2024-42175 2025-01-11 17:15 2025-01-11 Show GitHub Exploit DB Packet Storm
79 6.4 MEDIUM
Network 		- - The Perfect Portal Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'perfect_portal_intake_form' shortcode in all versions up to, and including, 3.0.3 due to… New CWE-79
Cross-site Scripting 		CVE-2024-12527 2025-01-11 17:15 2025-01-11 Show GitHub Exploit DB Packet Storm
80 6.4 MEDIUM
Network 		- - The Dominion – Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominion_shortcodes_domain_search_6' shortcode in all versions up to, an… New CWE-79
Cross-site Scripting 		CVE-2024-12520 2025-01-11 17:15 2025-01-11 Show GitHub Exploit DB Packet Storm