Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Jan. 15, 2025, 6:03 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 195601 | 6.8 | 警告 | christof bruyland | - | V-webmail における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-6840 | 2012-06-26 16:10 | 2009-07-1 | Show | GitHub Exploit DB Packet Storm |
| 195602 | 10 | 危険 | fuzzylime | - | fuzzylime (cms) における ディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-6834 | 2012-06-26 16:10 | 2009-06-22 | Show | GitHub Exploit DB Packet Storm |
| 195603 | 10 | 危険 | fuzzylime | - | fuzzylime (cms) の commsrss.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-6833 | 2012-06-26 16:10 | 2009-06-22 | Show | GitHub Exploit DB Packet Storm |
| 195604 | 6.8 | 警告 | Atlassian | - | Atlassian JIRA Enterprise Edition におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2008-6832 | 2012-06-26 16:10 | 2009-06-8 | Show | GitHub Exploit DB Packet Storm |
| 195605 | 4.3 | 警告 | Atlassian | - | Atlassian JIRA Enterprise Edition におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-6831 | 2012-06-26 16:10 | 2009-06-8 | Show | GitHub Exploit DB Packet Storm |
| 195606 | 10 | 危険 | a-link | - | A-LINK のWL54AP3 および WL54AP2 の管理インタフェースにおけるアクセス権を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2008-6824 | 2012-06-26 16:10 | 2009-06-4 | Show | GitHub Exploit DB Packet Storm |
| 195607 | 6.8 | 警告 | a-link | - | A-LINK のWL54AP3 および WL54AP2 の管理インタフェースにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2008-6823 | 2012-06-26 16:10 | 2009-06-4 | Show | GitHub Exploit DB Packet Storm |
| 195608 | 10 | 危険 | Eaton | - | Eaton MGEOPS Network Shutdown Module における任意のコードを実行される脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-6816 | 2012-06-26 16:10 | 2009-05-28 | Show | GitHub Exploit DB Packet Storm |
| 195609 | 4 | 警告 | シトリックス・システムズ | - | Citrix Web Interface for Java Application Servers のセッション切断機能におけるユーザの Web インターフェースセッションへのアクセス権を取得される脆弱性 |
CWE-Other
その他 |
CVE-2008-6830 | 2012-06-26 16:10 | 2008-10-24 | Show | GitHub Exploit DB Packet Storm |
| 195610 | 7.5 | 危険 | bookingcentre | - | Venalsur Booking Centre Booking System の admin/checklogin.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6810 | 2012-06-26 16:10 | 2009-05-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Jan. 16, 2025, 4:15 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 391 | 4.2 |
MEDIUM
Physics |
- | - | Windows BitLocker Information Disclosure Vulnerability New |
CWE-636
Not Failing Securely ('Failing Open') |
CVE-2025-21210 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 392 | 7.5 |
HIGH
Network
-
|
-
|
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
New
|
CWE-400
|
Uncontrolled Resource Consumption
CVE-2025-21207
|
2025-01-15 03:15 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 393 | 6.1 |
MEDIUM
Physics |
- | - | Windows Recovery Environment Agent Elevation of Privilege Vulnerability New |
CWE-284
Improper Access Control |
CVE-2025-21202 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 394 | 6.5 |
MEDIUM
Network |
- | - | Active Directory Federation Server Spoofing Vulnerability New |
CWE-352
Origin Validation Error |
CVE-2025-21193 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 395 | 4.3 |
MEDIUM
Network |
- | - | MapUrlToZone Security Feature Bypass Vulnerability New |
CWE-41
Improper Resolution of Path Equivalence |
CVE-2025-21189 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 396 | 7.8 |
HIGH
Local |
- | - | Microsoft Power Automate Remote Code Execution Vulnerability New |
CWE-94
Code Injection |
CVE-2025-21187 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 397 | 7.8 |
HIGH
Local |
- | - | Microsoft Access Remote Code Execution Vulnerability New |
CWE-122
Heap-based Buffer Overflow |
CVE-2025-21186 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 398 | 8.8 |
HIGH
Network |
- | - | Visual Studio Remote Code Execution Vulnerability New |
CWE-125 CWE-122 Out-of-bounds Read Heap-based Buffer Overflow |
CVE-2025-21178 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 399 | 8.8 |
HIGH
Network |
- | - | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability New |
CWE-126
Buffer Over-read |
CVE-2025-21176 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 400 | 7.5 |
HIGH
Network |
- | - | .NET and Visual Studio Remote Code Execution Vulnerability New |
CWE-190 CWE-122 Integer Overflow or Wraparound Heap-based Buffer Overflow |
CVE-2025-21172 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |