Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194971 6.8 警告 deliantra - Deliantra Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4846 2012-06-26 16:19 2010-05-7 Show GitHub Exploit DB Packet Storm
194972 4.3 警告 BASE - BASE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4839 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
194973 7.5 危険 BASE - BASE の base_ag_common.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4838 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
194974 4.3 警告 BASE - Basic Analysis におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4837 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
194975 7.2 危険 deslock - DESlock+ の dlpcrypt.sys カーネルドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4832 2012-06-26 16:19 2010-04-29 Show GitHub Exploit DB Packet Storm
194976 5 警告 8pixel - 8pixel.net Blog におけるデータベースがダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4825 2012-06-26 16:19 2010-04-27 Show GitHub Exploit DB Packet Storm
194977 4.3 警告 cPanel - cPanel の frontend/x3/files/fileop.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4823 2012-06-26 16:19 2010-04-27 Show GitHub Exploit DB Packet Storm
194978 5 警告 D-Link Systems, Inc. - D-Link DIR-615 におけるDNS 設定を変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4821 2012-06-26 16:19 2010-04-27 Show GitHub Exploit DB Packet Storm
194979 5 警告 ASP indir - Angelo-Emlak におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4820 2012-06-26 16:19 2010-04-27 Show GitHub Exploit DB Packet Storm
194980 6.8 警告 element-it - Element-IT Ultimate Uploader における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4817 2012-06-26 16:19 2010-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Post-to-Post Links allows Stored XSS.This issue affects Post-to-Post Links: from n/a… New CWE-79
Cross-site Scripting 		CVE-2025-23878 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
272 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nitethemes Nite Shortcodes allows Stored XSS.This issue affects Nite Shortcodes: from n/a through… New CWE-79
Cross-site Scripting 		CVE-2025-23877 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
273 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jens Remus WP krpano allows Stored XSS.This issue affects WP krpano: from n/a through 1.2.1. New CWE-79
Cross-site Scripting 		CVE-2025-23876 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
274 - - - Cross-Site Request Forgery (CSRF) vulnerability in Tim Ridgway Better Protected Pages allows Stored XSS.This issue affects Better Protected Pages: from n/a through 1.0. New CWE-352
 Origin Validation Error 		CVE-2025-23875 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
275 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anshi Solutions Category D3 Tree allows Stored XSS.This issue affects Category D3 Tree: from n/a … New CWE-79
Cross-site Scripting 		CVE-2025-23873 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
276 - - - Cross-Site Request Forgery (CSRF) vulnerability in PayForm PayForm allows Stored XSS.This issue affects PayForm: from n/a through 2.0. New CWE-352
 Origin Validation Error 		CVE-2025-23872 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
277 - - - Cross-Site Request Forgery (CSRF) vulnerability in Bas Matthee LSD Google Maps Embedder allows Cross Site Request Forgery.This issue affects LSD Google Maps Embedder: from n/a through 1.1. New CWE-352
 Origin Validation Error 		CVE-2025-23871 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
278 - - - Cross-Site Request Forgery (CSRF) vulnerability in Robert Nicholson Copyright Safeguard Footer Notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through 3.0. New CWE-352
 Origin Validation Error 		CVE-2025-23870 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
279 - - - Cross-Site Request Forgery (CSRF) vulnerability in Shibu Lijack a.k.a CyberJack CJ Custom Content allows Stored XSS.This issue affects CJ Custom Content: from n/a through 2.0. New CWE-352
 Origin Validation Error 		CVE-2025-23869 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
280 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Liebelt Chess Tempo Viewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n… New CWE-79
Cross-site Scripting 		CVE-2025-23868 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm