Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195131 6.5 警告 cupidsystems - MyMiniBill の my_orders.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4198 2012-06-26 16:18 2009-12-4 Show GitHub Exploit DB Packet Storm
195132 9.3 危険 アップル
マイクロソフト
- Apple Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-4186 2012-06-26 16:18 2009-12-3 Show GitHub Exploit DB Packet Storm
195133 5 警告 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-4175 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
195134 6 警告 korn19
CutePHP
- CutePHP CuteNews の editnews モジュールにおける管理モデレーションを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4174 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
195135 6.8 警告 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4173 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
195136 2.6 注意 korn19
CutePHP
- CutePHP CuteNews および UTF-8 CuteNews の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4172 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
195137 4.3 警告 TYPO3 Association
an searchit
- TYPO3 のan_searchit 拡張におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4161 2012-06-26 16:18 2009-12-1 Show GitHub Exploit DB Packet Storm
195138 7.5 危険 ciamos - Ciamos CMS の modules/pms/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4156 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
195139 7.5 危険 eshopbuilder - Eshopbuilde CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4155 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
195140 5 警告 Elxis - Elxis CMS の includes/feedcreator.class.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4154 2012-06-26 16:18 2009-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
381 - - - Cross-Site Request Forgery (CSRF) vulnerability in Walter Cerrudo MFPlugin allows Stored XSS.This issue affects MFPlugin: from n/a through 1.3. New CWE-352
 Origin Validation Error
CVE-2025-23660 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
382 - - - Cross-Site Request Forgery (CSRF) vulnerability in Hernan Javier Hegykozi MercadoLibre Integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through 1.1. New CWE-352
 Origin Validation Error
CVE-2025-23659 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
383 - - - Cross-Site Request Forgery (CSRF) vulnerability in Vinícius Krolow Twitter Post allows Stored XSS.This issue affects Twitter Post: from n/a through 0.1. New CWE-352
 Origin Validation Error
CVE-2025-23654 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
384 - - - Cross-Site Request Forgery (CSRF) vulnerability in Kreg Steppe Auphonic Importer allows Stored XSS.This issue affects Auphonic Importer: from n/a through 1.5.1. New CWE-352
 Origin Validation Error
CVE-2025-23649 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
385 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kuepper QuoteMedia Tools allows DOM-Based XSS.This issue affects QuoteMedia Tools: from n/… New CWE-79
Cross-site Scripting
CVE-2025-23644 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
386 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pflonk Sidebar-Content from Shortcode allows DOM-Based XSS.This issue affects Sidebar-Content fro… New CWE-79
Cross-site Scripting
CVE-2025-23642 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
387 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Ehrhardt Powie's pLinks PagePeeker allows DOM-Based XSS.This issue affects Powie's pLinks … New CWE-79
Cross-site Scripting
CVE-2025-23641 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
388 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through 1.2.0. New CWE-352
 Origin Validation Error
CVE-2025-23640 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
389 - - - Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0. New CWE-352
 Origin Validation Error
CVE-2025-23639 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
390 - - - Cross-Site Request Forgery (CSRF) vulnerability in Gordon French Comment-Emailer allows Stored XSS.This issue affects Comment-Emailer: from n/a through 1.0.5. New CWE-352
 Origin Validation Error
CVE-2025-23627 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm