Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195271 7.5 危険 bosdev - BosDev BosClassifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6526 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
195272 6.5 警告 cale dunlap - openInvoice の resetpass.php における任意のユーザパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6524 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
195273 7.5 危険 cale dunlap - openInvoice の auth.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6523 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
195274 6.8 警告 devraj mukherjee - Terracotta の ContentRender.class.php の RenderFile 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6522 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
195275 7.8 危険 devraj mukherjee - Terracotta の index.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6521 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
195276 6.2 警告 compiz - Compiz Fusion の Expo プラグインにおけるロックされたデスクトップへアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6514 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
195277 6.8 警告 Andy's PHP Knowledgebase Project - Andy's PHP Knowledgebase の saa.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6513 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
195278 6.8 警告 Google - Google Gears の WorkerPool API における同一送信元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2008-6512 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
195279 4.3 警告 codetoad - CodeToad ASP Shopping Cart Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6500 2012-06-26 16:10 2009-03-20 Show GitHub Exploit DB Packet Storm
195280 5.5 警告 Apache Friends - XAMPP の security/xamppsecurity.php における重要な変数を偽装される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6499 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 - - - A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the Survey Title field or Survey Instructions. When a u… New - CVE-2024-56377 2025-01-10 08:15 2025-01-10 Show GitHub Exploit DB Packet Storm
42 - - - A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the re… New - CVE-2024-56376 2025-01-10 08:15 2025-01-10 Show GitHub Exploit DB Packet Storm
43 8.8 HIGH
Network 		- - A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network. New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2025-21385 2025-01-10 07:15 2025-01-10 Show GitHub Exploit DB Packet Storm
44 - - - In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user access can be manipulated to render the host computer unavailable or to execute programs with an elevati… New - CVE-2024-46464 2025-01-10 07:15 2025-01-10 Show GitHub Exploit DB Packet Storm
45 - - - An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against affected targets, specifying known NRPE plugins, which in default installations ar… New - CVE-2023-28354 2025-01-10 07:15 2025-01-10 Show GitHub Exploit DB Packet Storm
46 - - - In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An atta… New - CVE-2024-55553 2025-01-10 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
47 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_f… New NVD-CWE-noinfo
CVE-2024-56780 2025-01-10 06:50 2025-01-9 Show GitHub Exploit DB Packet Storm
48 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check The return value of drm_atomic_get_crtc_state() … New CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-56778 2025-01-10 06:50 2025-01-9 Show GitHub Exploit DB Packet Storm
49 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_ta… New CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-56779 2025-01-10 06:48 2025-01-9 Show GitHub Exploit DB Packet Storm
50 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check The return value of drm_atomic_get_crtc_state() ne… New CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-56777 2025-01-10 06:43 2025-01-9 Show GitHub Exploit DB Packet Storm