Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195541 7.5 危険 Activewebsoftwares - ActiveVotes の register.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5633 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
195542 7.5 危険 Activewebsoftwares - Active Time Billing の Account.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5632 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
195543 5 警告 aspapps - ASPTicker におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5603 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195544 5 警告 cold bbs - Cold BBS におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5597 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195545 5 警告 dotnetindex - Ikon AdManager におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5596 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195546 7.5 危険 aspapps - ASP AutoDealer の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5595 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195547 7.5 危険 bpowerhouse - Mini Blog の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5594 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195548 7.5 危険 bpowerhouse - Mini CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5593 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195549 6.8 警告 check up - Check Up New Generation の findoffice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5586 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
195550 7.5 危険 adcomplete - Poll Pro のログイン機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5573 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 - - - Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3. New - CVE-2024-13257 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
132 - - - Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affec… New CWE-843
Type Confusion 		CVE-2025-22151 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
133 7.5 HIGH
Network 		- - An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based attacker to send malformed BGP packets t… New CWE-125
Out-of-bounds Read 		CVE-2025-21598 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
134 - - - Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4. New - CVE-2024-13256 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
135 - - - Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10. New - CVE-2024-13255 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
136 - - - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1. New - CVE-2024-13254 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
137 - - - Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0. New - CVE-2024-13253 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
138 - - - Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1. New - CVE-2024-13251 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
139 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6. New - CVE-2024-13250 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
140 - - - Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1… New - CVE-2024-13249 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm