Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195031 7.2 危険 Accellion - Accellion Secure File Transfer Appliance における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4648 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
195032 4.3 警告 Accellion - Accellion Secure File Transfer Appliance におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4647 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
195033 9 危険 Accellion - Accellion Secure File Transfer Appliance の管理用の Web インターフェースにおける任意のシェルコマンドを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4646 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
195034 7.8 危険 Accellion - Accellion Secure File Transfer Appliance の web_client_user_guide.html におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4645 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
195035 9 危険 Accellion - Accellion Secure File Transfer Appliance における任意コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-4644 2012-06-26 16:19 2010-02-19 Show GitHub Exploit DB Packet Storm
195036 7.2 危険 GNOME Project - gnome-screensaver における画面がロックされている無人のワークステーションにアクセスされる脆弱性 CWE-Other
その他 		CVE-2009-4642 2012-06-26 16:19 2010-02-11 Show GitHub Exploit DB Packet Storm
195037 7.2 危険 GNOME Project - gnome-screensaver における画面がロックされている無人のワークステーションにアクセスされる脆弱性 CWE-Other
その他 		CVE-2009-4641 2012-06-26 16:19 2010-02-11 Show GitHub Exploit DB Packet Storm
195038 4.3 警告 FFmpeg - FFmpeg の vorbis_dec.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4640 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
195039 4.3 警告 FFmpeg - FFmpeg の AVI デマルチプレクサの av_rescale_rnd 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4639 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
195040 4.3 警告 FFmpeg - FFmpeg における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-4638 2012-06-26 16:19 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Cross-Site Request Forgery (CSRF) vulnerability in Turcu Ciprian Auto FTP allows Stored XSS. This issue affects Auto FTP: from n/a through 1.0.1. New CWE-352
 Origin Validation Error 		CVE-2025-23793 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
192 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RocaPress Horizontal Line Shortcode allows Stored XSS.This issue affects Horizontal Line Shortcod… New CWE-79
Cross-site Scripting 		CVE-2025-23791 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
193 - - - Missing Authorization vulnerability in August Infotech AI Responsive Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Responsive Gallery Alb… New CWE-862
 Missing Authorization 		CVE-2025-23785 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
194 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AlphaBPO Easy Code Snippets allows SQL Injection.This issue affects Easy Code Snippets: from n/a … New CWE-89
SQL Injection 		CVE-2025-23780 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
195 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv.de ResAds allows SQL Injection.This issue affects ResAds: from n/a through 2.0.5. New CWE-89
SQL Injection 		CVE-2025-23779 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
196 - - - Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: fr… New CWE-862
 Missing Authorization 		CVE-2025-23778 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
197 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Willows Consulting Ltd. GDPR Personal Data Reports allows Stored XSS.This issue affects GDPR Pers… New CWE-79
Cross-site Scripting 		CVE-2025-23777 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
198 - - - Missing Authorization vulnerability in Thorn Technologies LLC Cache Sniper for Nginx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cache Sniper for Nginx:… New CWE-862
 Missing Authorization 		CVE-2025-23776 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
199 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WWP GMAPS for WPBakery Page Builder Free allows Stored XSS.This issue affects GMAPS for WPBakery … New CWE-79
Cross-site Scripting 		CVE-2025-23775 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
200 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eugenio Petullà imaGenius allows Stored XSS.This issue affects imaGenius: from n/a through 1.7. New CWE-79
Cross-site Scripting 		CVE-2025-23772 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm