Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194961 5 警告 bogofilter - bogofilter の base64.c の base64 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-2494 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
194962 7.5 危険 2daybiz - 2daybiz Video Community Portal Script の video.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2459 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
194963 4.3 警告 2daybiz - 2daybiz Video Community Portal Script の video.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2458 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
194964 6.8 警告 codelib - Linker IMG の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2456 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
194965 4.3 警告 アップル - Apple Safari におけるなりすまし攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2454 2012-06-26 16:19 2010-06-25 Show GitHub Exploit DB Packet Storm
194966 10 危険 freeciv - freeciv における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-2445 2012-06-26 16:19 2010-07-8 Show GitHub Exploit DB Packet Storm
194967 4.3 警告 アップル - WebKit におけるキーストロークを読み取られる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2441 2012-06-26 16:19 2010-06-24 Show GitHub Exploit DB Packet Storm
194968 4.3 警告 AneCMS - AneCMS Blog の class/tools.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2437 2012-06-26 16:19 2010-06-24 Show GitHub Exploit DB Packet Storm
194969 7.5 危険 AneCMS - AneCMS Blog の modules/blog/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2436 2012-06-26 16:19 2010-06-24 Show GitHub Exploit DB Packet Storm
194970 7.5 危険 Activewebsoftwares - ActiveWebSoftwares.com eWebquiz の eWebQuiz.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2359 2012-06-26 16:19 2010-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
451 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1. New CWE-79
Cross-site Scripting
CVE-2025-22763 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
452 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TaxoPress WordPress Tag Cloud Plugin – Tag Groups allows Reflected XSS. This issue affects WordPr… New CWE-79
Cross-site Scripting
CVE-2025-22735 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
453 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPHocus My auctions allegro allows Reflected XSS. This issue affects My auctions allegro: from n/… New CWE-79
Cross-site Scripting
CVE-2025-22733 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
454 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Admiral Ad Blocking Detector allows Stored XSS. This issue affects Ad Blocking Detector: from n/a… New CWE-79
Cross-site Scripting
CVE-2025-22732 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
455 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS. This issue affects MailChimp Subscribe Fo… New CWE-79
Cross-site Scripting
CVE-2025-22727 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
456 - - - Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Upload a Web Shell to a Web Server. This issue affects Barcode Scann… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2025-22723 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
457 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E4J s.r.l. VikAppointments Services Booking Calendar allows Stored XSS. This issue affects VikApp… New CWE-79
Cross-site Scripting
CVE-2025-22719 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
458 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roninwp FAT Event Lite allows Stored XSS. This issue affects FAT Event Lite: from n/a through 1.1. New CWE-79
Cross-site Scripting
CVE-2025-22718 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
459 - - - Missing Authorization vulnerability in Joe Dolson My Tickets allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects My Tickets: from n/a through 2.0.9. New CWE-862
 Missing Authorization
CVE-2025-22717 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
460 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Team Taskbuilder allows SQL Injection. This issue affects Taskbuilder: from n/a throu… New CWE-89
SQL Injection
CVE-2025-22716 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm