Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195251 7.5 危険 ASP indir - BatmanPorTaL における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6640 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
195252 6.8 警告 Pydio - AjaXplorer の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6639 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
195253 6.8 警告 geody - Geody Labs Dagger - The Cutting Edge における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6636 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
195254 6.8 警告 geody - Geody Labs Dagger - The Cutting Edge における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6635 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
195255 9 危険 アバイア - Avaya SES の Web 管理インターフェースにおける任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6709 2012-06-26 16:10 2008-06-25 Show GitHub Exploit DB Packet Storm
195256 9 危険 アバイア - Avaya SES の Web 管理インターフェースにおける root 権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6708 2012-06-26 16:10 2008-06-25 Show GitHub Exploit DB Packet Storm
195257 6.4 警告 アバイア - Avaya SES の Web 管理インターフェースにおける重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6707 2012-06-26 16:10 2008-06-25 Show GitHub Exploit DB Packet Storm
195258 7.8 危険 アバイア - Avaya SES の Web 管理インターフェースにおけるアプリケーションサーバ設定を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6706 2012-06-26 16:10 2008-06-25 Show GitHub Exploit DB Packet Storm
195259 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 の ste_prayer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6694 2012-06-26 16:10 2008-07-9 Show GitHub Exploit DB Packet Storm
195260 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 の pd_trainingcourses 拡張における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6692 2012-06-26 16:10 2008-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X-* before 7.X-1.15. New - CVE-2024-13297 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
192 - - - Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1. New - CVE-2024-13296 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
193 - - - A cross-site scripting (XSS) vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Sett… New - CVE-2024-42898 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
194 - - - Exposed Dangerous Method or Function vulnerability in Drupal Swift Mailer allows Resource Location Spoofing.This issue affects Swift Mailer: *.*. New - CVE-2024-13242 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
195 - - - Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5. New - CVE-2024-13241 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
196 - - - Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05. New - CVE-2024-13240 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
197 - - - Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0. New - CVE-2024-13239 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
198 8.8 HIGH
Network 		codezips blood_bank_management_system A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /successadmin.php. The manipulation… Update CWE-89
SQL Injection 		CVE-2025-0232 2025-01-11 02:36 2025-01-6 Show GitHub Exploit DB Packet Storm
199 4.8 MEDIUM
Network 		zerowdd studentmanager A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controlle… Update CWE-79
Cross-site Scripting 		CVE-2024-13142 2025-01-11 02:32 2025-01-6 Show GitHub Exploit DB Packet Storm
200 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from child qdisc In general, 'qlen' of any classful qdisc should keep track of the … Update NVD-CWE-noinfo
CVE-2024-56770 2025-01-11 02:32 2025-01-9 Show GitHub Exploit DB Packet Storm