Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 6, 2025, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195571 6.8 警告 exv2 - eXV2 の Industry Book モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1404 2012-06-26 16:02 2008-03-20 Show GitHub Exploit DB Packet Storm
195572 6.8 警告 bootmanage - BootManage Administrator の BootManage TFTPD におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1403 2012-06-26 16:02 2008-03-20 Show GitHub Exploit DB Packet Storm
195573 4.3 警告 csphere - Clansphere の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1399 2012-06-26 16:02 2008-03-20 Show GitHub Exploit DB Packet Storm
195574 6.8 警告 AuraCMS - AuraCMS の online.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1398 2012-06-26 16:02 2008-03-20 Show GitHub Exploit DB Packet Storm
195575 9.3 危険 Digium - Asterisk Open Source の AsteriskGUI HTTP サーバにおける管理者のセッションをハイジャックされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-1390 2012-06-26 16:02 2008-03-18 Show GitHub Exploit DB Packet Storm
195576 1.9 注意 Gentoo Linux - src_compile などで使用される ssl-cert.eclass における binpkg から鍵を抽出される脆弱性 CWE-310
暗号の問題
CVE-2008-1383 2012-06-26 16:02 2008-03-18 Show GitHub Exploit DB Packet Storm
195577 3.6 注意 drake team - Drake CMS の install/index.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1371 2012-06-26 16:02 2008-03-18 Show GitHub Exploit DB Packet Storm
195578 6.5 警告 Alt-N - Alt-N Technologies MDaemon の IMAP サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1358 2012-06-26 16:02 2008-03-17 Show GitHub Exploit DB Packet Storm
195579 7.5 危険 advanced data solutions - Advanced Data Solutions VSO-XP の MyIssuesView.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1354 2012-06-26 16:02 2008-03-17 Show GitHub Exploit DB Packet Storm
195580 7.5 危険 fully modded phpbb - phpbbfm の kb.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1350 2012-06-26 16:02 2008-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 6, 2025, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 - - - A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegist… New CWE-476
CWE-404
 NULL Pointer Dereference
 Improper Resource Shutdown or Release
CVE-2025-0223 2025-01-6 01:15 2025-01-6 Show GitHub Exploit DB Packet Storm
2 - - - A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the compo… New CWE-476
CWE-404
 NULL Pointer Dereference
 Improper Resource Shutdown or Release
CVE-2025-0222 2025-01-6 01:15 2025-01-6 Show GitHub Exploit DB Packet Storm
3 - - - A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL… New CWE-476
CWE-404
 NULL Pointer Dereference
 Improper Resource Shutdown or Release
CVE-2025-0221 2025-01-6 00:15 2025-01-6 Show GitHub Exploit DB Packet Storm
4 - - - A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The ma… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2024-13141 2025-01-6 00:15 2025-01-6 Show GitHub Exploit DB Packet Storm
5 - - - A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument H… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2025-0220 2025-01-5 22:15 2025-01-5 Show GitHub Exploit DB Packet Storm
6 - - - A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Han… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2024-13140 2025-01-5 21:15 2025-01-5 Show GitHub Exploit DB Packet Storm
7 - - - A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileC… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-13139 2025-01-5 20:15 2025-01-5 Show GitHub Exploit DB Packet Storm
8 - - - A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/Loc… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-13138 2025-01-5 20:15 2025-01-5 Show GitHub Exploit DB Packet Storm
9 - - - A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2024-13137 2025-01-5 19:15 2025-01-5 Show GitHub Exploit DB Packet Storm
10 - - - A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/Shir… New CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data
CVE-2024-13136 2025-01-5 18:15 2025-01-5 Show GitHub Exploit DB Packet Storm