Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195181 5.1 警告 2532gigs - 2532designs 2532|Gigs におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6901 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
195182 6.5 警告 availscript - AvailScript Article Script の addpen.php の "ペンネーム / 作成名を追加" 機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6900 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
195183 9 危険 freeSSHd - freeSSHd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6899 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
195184 9.3 危険 andres garcia - Andres Garcia Getleft の Getleft.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6897 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
195185 5 警告 3CX - 3CX Phone System の login.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6896 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
195186 7.8 危険 3CX - 3CX Phone System におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-6895 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
195187 4.3 警告 3CX - 3CX Phone System Free Edition の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6894 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
195188 4.3 警告 マイクロソフト
Alt-N		 - Alt-N MDaemon WorldClient におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6893 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
195189 4.3 警告 codetoad - ASP Forum Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6891 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
195190 7.5 危険 codetoad - ASP Forum Script の messages.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6890 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 9.8 CRITICAL
Network 		campcodes project_management_system A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&… Update CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-0213 2025-01-11 03:55 2025-01-5 Show GitHub Exploit DB Packet Storm
172 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: put bpf_link's program when link is safe to be deallocated In general, BPF link's underlying BPF program should be considere… Update NVD-CWE-noinfo
CVE-2024-56786 2025-01-11 03:53 2025-01-9 Show GitHub Exploit DB Packet Storm
173 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Breadcrumbs2 extension allows Cross-Site Scripting (XSS).… New - CVE-2025-23078 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
174 - - - During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms.  Publicl… New - CVE-2024-6880 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
175 - - - Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user cou… New - CVE-2024-6662 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
176 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. New - CVE-2024-57228 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
177 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. New - CVE-2024-57227 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
178 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function. New - CVE-2024-57226 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
179 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. New - CVE-2024-57225 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
180 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. New - CVE-2024-57224 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm