Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196141 7.5 危険 editeurscripts - EsFaq の questions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3952 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
196142 5 警告 アップル - Apple iPhone の _web_drawInRect:withFont:ellipsis:alignment:measureOnly 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2008-3950 2012-06-26 16:02 2008-09-16 Show GitHub Exploit DB Packet Storm
196143 7.5 危険 discountedscripts - ACG-PTP の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3944 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
196144 7.5 危険 ezonescripts - eZoneScripts Living Local の listtest.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3943 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
196145 4.3 警告 bizdirectory - BizDirectory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3941 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
196146 5 警告 AVTECH - AVTECH PageR Enterprise の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3939 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
196147 7.8 危険 DreamBox - Dreambox DM500C の Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3936 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
196148 9.3 危険 EZB Systems - UltraISO におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2008-3871 2012-06-26 16:02 2009-04-1 Show GitHub Exploit DB Packet Storm
196149 6.9 警告 Debian - Citadel Server の migrate_aliases.sh における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-3930 2012-06-26 16:02 2008-08-24 Show GitHub Exploit DB Packet Storm
196150 7.2 危険 Ampache.org - Ampache の gather-messages.sh における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-3929 2012-06-26 16:02 2008-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.… - CVE-2024-13283 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
362 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 b… - CVE-2024-13273 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
363 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal View Password allows Cross-Site Scripting (XSS).This issue affects View Password: from 0.0… - CVE-2024-13262 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
364 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0. - CVE-2024-13252 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
365 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.… - CVE-2024-13247 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
366 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting (XSS).This issue affects … - CVE-2024-13245 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
367 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Typogrify allows Cross-Site Scripting (XSS).This issue affects Typogrify: from 0.0.0 befor… - CVE-2024-13238 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
368 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File En… - CVE-2024-13237 2025-01-10 06:15 2025-01-10 Show GitHub Exploit DB Packet Storm
369 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match() does not check for adev == NULL, dere… CWE-476
 NULL Pointer Dereference
CVE-2024-56782 2025-01-10 06:00 2025-01-9 Show GitHub Exploit DB Packet Storm
370 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_search_slot() Syzbot reports a null-ptr-deref in btrfs_search_slot(). The repr… CWE-476
 NULL Pointer Dereference
CVE-2024-56774 2025-01-10 06:00 2025-01-9 Show GitHub Exploit DB Packet Storm