Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196341 4.3 警告 ecomstudio - PHP Easy Shopping Cart の subitems.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4856 2012-06-26 16:19 2010-05-11 Show GitHub Exploit DB Packet Storm
196342 4.3 警告 festic - SemanticScuttle におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4852 2012-06-26 16:19 2010-05-7 Show GitHub Exploit DB Packet Storm
196343 9.3 危険 awingsoft - Awingsoft Awakening Winds3D Viewer プラグインにおける任意のプログラムを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4850 2012-06-26 16:19 2010-05-7 Show GitHub Exploit DB Packet Storm
196344 4 警告 deliantra - Deliantra Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4847 2012-06-26 16:19 2010-05-7 Show GitHub Exploit DB Packet Storm
196345 6.8 警告 deliantra - Deliantra Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4846 2012-06-26 16:19 2010-05-7 Show GitHub Exploit DB Packet Storm
196346 4.3 警告 BASE - BASE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4839 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
196347 7.5 危険 BASE - BASE の base_ag_common.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4838 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
196348 4.3 警告 BASE - Basic Analysis におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4837 2012-06-26 16:19 2010-05-6 Show GitHub Exploit DB Packet Storm
196349 7.2 危険 deslock - DESlock+ の dlpcrypt.sys カーネルドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4832 2012-06-26 16:19 2010-04-29 Show GitHub Exploit DB Packet Storm
196350 5 警告 8pixel - 8pixel.net Blog におけるデータベースがダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4825 2012-06-26 16:19 2010-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2031 - - - mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malic… CWE-441
CWE-288
Confused Deputy
Authentication Bypass Using an Alternate Path or Channel 		CVE-2025-23217 2025-02-7 03:15 2025-02-7 Show GitHub Exploit DB Packet Storm
2032 - - - A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter. - CVE-2025-25181 2025-02-7 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
2033 - - - Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be us… - CVE-2024-57968 2025-02-7 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
2034 5.3 MEDIUM
Local 		- - A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical. This vulnerability affects the function shouldAcceptNewConnection of the file … CWE-285
CWE-266
Improper Authorization
 Incorrect Privilege Assignment 		CVE-2025-1078 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
2035 - - - PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s brows… - CVE-2024-57427 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
2036 - - - Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Securi… - CVE-2024-13614 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
2037 - - - A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57086 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2038 - - - A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57080 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2039 - - - A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57071 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
2040 - - - A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57069 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm