Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 17, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195081 6.5 警告 CutePHP - CutePHP CuteNews の Categories モジュールにおける任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-4115 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
195082 6.5 警告 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-4113 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
195083 9 危険 The Cacti Group - Cacti における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4112 2012-06-26 16:18 2009-11-30 Show GitHub Exploit DB Packet Storm
195084 4.3 警告 DNN - DotNetNuke の search 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4110 2012-06-26 16:18 2009-11-26 Show GitHub Exploit DB Packet Storm
195085 5 警告 DNN - DotNetNuke のインストールウィザードにおけるバージョン情報などの重要な情報へアクセスされる脆弱性 CWE-200
情報漏えい
CVE-2009-4109 2012-06-26 16:18 2009-11-26 Show GitHub Exploit DB Packet Storm
195086 4 警告 dxm2008 - XM Easy Personal FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-4108 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
195087 9.3 危険 amplusnet - Invisible Browsing におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4107 2012-06-26 16:18 2009-11-29 Show GitHub Exploit DB Packet Storm
195088 7.5 危険 Debian - Lintian における任意のコマンドを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2009-4015 2012-06-26 16:18 2010-01-27 Show GitHub Exploit DB Packet Storm
195089 4.3 警告 GForge Group - GForge におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4069 2012-06-26 16:18 2009-11-24 Show GitHub Exploit DB Packet Storm
195090 6.8 警告 Drupal
paul beaney
- Drupal 用の PHPList Integration モジュールの "My Account" 機能におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4066 2012-06-26 16:18 2009-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 - - - Cross-Site Request Forgery (CSRF) vulnerability in SpruceJoy Cookie Consent & Autoblock for GDPR/CCPA allows Stored XSS.This issue affects Cookie Consent & Autoblock for GDPR/CCPA: from n/a through 1… New CWE-352
 Origin Validation Error
CVE-2025-23501 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
292 - - - Cross-Site Request Forgery (CSRF) vulnerability in Pascal Casier Board Election allows Stored XSS.This issue affects Board Election: from n/a through 1.0.1. New CWE-352
 Origin Validation Error
CVE-2025-23499 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
293 - - - Cross-Site Request Forgery (CSRF) vulnerability in Albdesign Simple Project Manager allows Stored XSS.This issue affects Simple Project Manager: from n/a through 1.2.2. New CWE-352
 Origin Validation Error
CVE-2025-23497 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
294 - - - Cross-Site Request Forgery (CSRF) vulnerability in Niklas Olsson Universal Analytics Injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through 1.0.3. New CWE-352
 Origin Validation Error
CVE-2025-23483 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
295 - - - Cross-Site Request Forgery (CSRF) vulnerability in isnowfy my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through 1.1. New CWE-352
 Origin Validation Error
CVE-2025-23476 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
296 - - - Cross-Site Request Forgery (CSRF) vulnerability in Andy Chapman ECT Add to Cart Button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through 1.4. New CWE-352
 Origin Validation Error
CVE-2025-23471 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
297 - - - Cross-Site Request Forgery (CSRF) vulnerability in X Villamuera Visit Site Link enhanced allows Stored XSS.This issue affects Visit Site Link enhanced: from n/a through 1.0. New CWE-352
 Origin Validation Error
CVE-2025-23470 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
298 - - - Cross-Site Request Forgery (CSRF) vulnerability in Vimal Ghorecha RSS News Scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through 2.0.0. New CWE-352
 Origin Validation Error
CVE-2025-23467 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
299 - - - Cross-Site Request Forgery (CSRF) vulnerability in Mukesh Dak MD Custom content after or before of post allows Stored XSS.This issue affects MD Custom content after or before of post: from n/a throug… New CWE-352
 Origin Validation Error
CVE-2025-23463 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
300 - - - Cross-Site Request Forgery (CSRF) vulnerability in Somethinkodd.com Development Team EmailShroud allows Reflected XSS.This issue affects EmailShroud: from n/a through 2.2.1. New CWE-352
 Origin Validation Error
CVE-2025-23456 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm