Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195401 7.5 危険 Cafuego - SDMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6236 2012-06-26 16:10 2009-02-21 Show GitHub Exploit DB Packet Storm
195402 7.5 危険 fivedollarscripts - Five Dollar Scripts Drinks スクリプトの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6233 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
195403 7.5 危険 dadamailproject
Joomla!
- Joomla! 用の Dada Mail Manager コンポーネントの config.dadamail.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6221 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
195404 4.3 警告 extrakt - Extrakt Framework の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6217 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
195405 7.5 危険 bookingcentre - Venalsur Booking Centre Booking System の cadena_ofertas_ext.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6216 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
195406 4.3 警告 bookingcentre - Venalsur Booking Centre Booking System の cadena_ofertas_ext.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6215 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
195407 7.5 危険 dream4 - dream4 Koobi の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6210 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
195408 4 警告 2532gigs - 2532designs 2532|Gigs における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6199 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
195409 4.3 警告 eeb-welt - EEBCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6190 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
195410 7.5 危険 GForge Group - GForge における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6189 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.… - CVE-2024-13283 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
362 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 b… - CVE-2024-13273 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
363 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal View Password allows Cross-Site Scripting (XSS).This issue affects View Password: from 0.0… - CVE-2024-13262 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
364 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0. - CVE-2024-13252 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
365 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.… - CVE-2024-13247 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
366 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting (XSS).This issue affects … - CVE-2024-13245 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
367 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Typogrify allows Cross-Site Scripting (XSS).This issue affects Typogrify: from 0.0.0 befor… - CVE-2024-13238 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
368 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File En… - CVE-2024-13237 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
369 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match() does not check for adev == NULL, dere… CWE-476
 NULL Pointer Dereference
CVE-2024-56782 2025-01-10 06:00 2025-01-9 Show GitHub Exploit DB Packet Storm
370 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_search_slot() Syzbot reports a null-ptr-deref in btrfs_search_slot(). The repr… CWE-476
 NULL Pointer Dereference
CVE-2024-56774 2025-01-10 06:00 2025-01-9 Show GitHub Exploit DB Packet Storm