Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195041 2.6 注意 gowondesigns - Leap CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1614 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195042 6.8 警告 gowondesigns - Leap CMS の leap.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1613 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195043 9.3 危険 baofeng - Baofeng Storm の MPS.StormPlayer ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1612 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195044 10 危険 electrasoft - ElectraSoft 32bit FTP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1611 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195045 6.8 警告 battleblog - Battle Blog の admin/uploadform.asp における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1609 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195046 9.3 危険 dafolo - Dafolo DafoloControl ActiveX コントロールにおけるスタックベースおよびヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1606 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195047 9.3 危険 アップル
アドビシステムズ		 - Apple Safari におけるドキュメントオブジェクトへのアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1600 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
195048 7.5 危険 armorlogic - Armorlogic Profense Web Application Firewall における特定の保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1594 2012-06-26 16:10 2009-05-21 Show GitHub Exploit DB Packet Storm
195049 4.3 警告 armorlogic - Armorlogic Profense Web Application Firewall におけるクロスサイトスクリプティング攻撃 (XSS) を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1593 2012-06-26 16:10 2009-05-21 Show GitHub Exploit DB Packet Storm
195050 10 危険 electrasoft - ElectraSoft 32bit FTP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1592 2012-06-26 16:10 2009-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eniture Technology Distance Based Shipping Calculator allows Reflected XSS.This issue affects Dis… New CWE-79
Cross-site Scripting 		CVE-2024-56301 2025-01-13 23:15 2025-01-13 Show GitHub Exploit DB Packet Storm
32 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder.biz Team WP2LEADS allows Reflected XSS.This issue affects WP2LEADS: from n/a through … New CWE-79
Cross-site Scripting 		CVE-2024-56065 2025-01-13 23:15 2025-01-13 Show GitHub Exploit DB Packet Storm
33 - - - A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/Loos… New - CVE-2025-0408 2025-01-13 23:15 2025-01-13 Show GitHub Exploit DB Packet Storm
34 - - - CloudStack users can add and read comments (annotations) on resources they are authorised to access.  Due to an access validation issue that affects Apache CloudStack versions from 4.16.0, users who… New CWE-200
Information Exposure 		CVE-2025-22828 2025-01-13 22:16 2025-01-13 Show GitHub Exploit DB Packet Storm
35 - - - Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data outside the Guest's virtualised GPU memory. New - CVE-2024-52936 2025-01-13 20:15 2025-01-13 Show GitHub Exploit DB Packet Storm
36 - - - Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. New - CVE-2024-52935 2025-01-13 20:15 2025-01-13 Show GitHub Exploit DB Packet Storm
37 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instability and reboots. New - CVE-2024-47897 2025-01-13 20:15 2025-01-13 Show GitHub Exploit DB Packet Storm
38 - - - Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. New - CVE-2024-47895 2025-01-13 20:15 2025-01-13 Show GitHub Exploit DB Packet Storm
39 - - - Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. New - CVE-2024-47894 2025-01-13 20:15 2025-01-13 Show GitHub Exploit DB Packet Storm
40 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2024. N… New - CVE-2024-51728 2025-01-13 19:15 2025-01-13 Show GitHub Exploit DB Packet Storm