Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 8, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196011 5 警告 advanced software engineering - Advanced Software Engineering ChartDirector の phpdemo/viewsource.php における重要な情報を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-1782 2012-06-26 16:02 2008-04-15 Show GitHub Exploit DB Packet Storm
196012 6.8 警告 dragoon - Dragoon の includes/header.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1773 2012-06-26 16:02 2008-04-14 Show GitHub Exploit DB Packet Storm
196013 7.5 危険 Firefly Media Server - Firefly Media Server の ws_getpostvars 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-1771 2012-06-26 16:02 2008-04-15 Show GitHub Exploit DB Packet Storm
196014 9.3 危険 アカマイテクノロジーズ - Akamai Download Manager ActiveX コントロールにおける CRLF インジェクションの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-1770 2012-06-26 16:02 2008-06-4 Show GitHub Exploit DB Packet Storm
196015 7.5 危険 blogator-script - Blogator-script の _blogadata/include/sond_result.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1763 2012-06-26 16:02 2008-04-12 Show GitHub Exploit DB Packet Storm
196016 6.8 警告 blogator-script - Blogator-script における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1760 2012-06-26 16:02 2008-04-12 Show GitHub Exploit DB Packet Storm
196017 4.3 警告 Alkacon Software - Alkacon OpenCMS の system/workplace/admin/workplace/sessions.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1753 2012-06-26 16:02 2008-04-11 Show GitHub Exploit DB Packet Storm
196018 7.5 危険 achmad zaenuri - ezRADIUS における資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-1752 2012-06-26 16:02 2008-04-11 Show GitHub Exploit DB Packet Storm
196019 6.8 警告 アップル - Apple QuickTime におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1739 2012-06-26 16:02 2008-09-3 Show GitHub Exploit DB Packet Storm
196020 7.2 危険 Comodo - Comodo Firewall Pro におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-1736 2012-06-26 16:02 2008-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 8, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 - - - Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute New - CVE-2024-40427 2025-01-8 04:15 2025-01-8 Show GitHub Exploit DB Packet Storm
132 - - - Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vu… New - CVE-2024-54007 2025-01-8 04:15 2025-01-8 Show GitHub Exploit DB Packet Storm
133 - - - Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vu… New - CVE-2024-54006 2025-01-8 04:15 2025-01-8 Show GitHub Exploit DB Packet Storm
134 - - - Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 #190. New - CVE-2024-44450 2025-01-8 04:15 2025-01-8 Show GitHub Exploit DB Packet Storm
135 - - - A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /search_result.php. The manipulation of the argument s leads t… New - CVE-2025-0299 2025-01-8 04:15 2025-01-8 Show GitHub Exploit DB Packet Storm
136 - - - A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some unknown functionality of the file /subcat.php. The manipulat… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-0301 2025-01-8 03:15 2025-01-8 Show GitHub Exploit DB Packet Storm
137 - - - An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. New - CVE-2024-55411 2025-01-8 03:15 2025-01-8 Show GitHub Exploit DB Packet Storm
138 - - - In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the `admin_all_objects` capability to the `splunk_app_soar` role. This addition could… New - CVE-2025-22621 2025-01-8 02:15 2025-01-8 Show GitHub Exploit DB Packet Storm
139 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ali Ali Alpha Price Table For Elementor allows DOM-Based XSS.This issue affects Alpha Price Table… New CWE-79
Cross-site Scripting 		CVE-2025-22500 2025-01-8 02:15 2025-01-8 Show GitHub Exploit DB Packet Storm
140 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric McNiece EMC2 Alert Boxes allows Stored XSS.This issue affects EMC2 Alert Boxes: from n/a thr… New CWE-79
Cross-site Scripting 		CVE-2025-22365 2025-01-8 02:15 2025-01-8 Show GitHub Exploit DB Packet Storm