Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196591 4.3 警告 acoustica - Acoustica MP3 Audio Mixer におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-3809 2012-06-26 16:18 2009-10-27 Show GitHub Exploit DB Packet Storm
196592 7.5 危険 DesDev Inc. - DedeCMS の feedback_js.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3806 2012-06-26 16:18 2009-10-27 Show GitHub Exploit DB Packet Storm
196593 4.3 警告 kde-apps
gpg4win
- Gpg4win の gpg2.exe におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-Other
その他
CVE-2009-3805 2012-06-26 16:18 2009-10-27 Show GitHub Exploit DB Packet Storm
196594 4.3 警告 amirocms - Amiro.CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3803 2012-06-26 16:18 2009-10-27 Show GitHub Exploit DB Packet Storm
196595 5 警告 amirocms - Amiro.CMS における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-3802 2012-06-26 16:18 2009-10-27 Show GitHub Exploit DB Packet Storm
196596 9.3 危険 cutepdf - FormMax evaluation におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3790 2012-06-26 16:18 2009-10-26 Show GitHub Exploit DB Packet Storm
196597 3.5 注意 2bits
Drupal
- Drupal の Userpoints モジュールにおける任意のユーザのユーザポイントデータを読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-3782 2012-06-26 16:18 2009-10-21 Show GitHub Exploit DB Packet Storm
196598 4.3 警告 Drupal
ashok modi
- Drupal のモジュールの Abuse におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3780 2012-06-26 16:18 2009-10-21 Show GitHub Exploit DB Packet Storm
196599 7.5 危険 Drupal
adam gerson
- Drupal のモジュールの Moodle Course List における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3778 2012-06-26 16:18 2009-10-21 Show GitHub Exploit DB Packet Storm
196600 5 警告 DELL EMC (旧 EMC Corporation) - EMC RepliStor のサーバの rep_serv.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-3744 2012-06-26 16:18 2009-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1411 4.3 MEDIUM
Network
- - A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/m… CWE-22
Path Traversal
CVE-2025-0703 2025-01-25 04:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1412 - - - The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.7.4, XSLT transforms performed by various components are vulnerable to XML external entit… CWE-611
XXE
CVE-2024-52807 2025-01-25 04:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1413 - - - An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL in… - CVE-2024-55573 2025-01-25 04:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1414 - - - An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to achieve SQL injection … - CVE-2024-53923 2025-01-25 04:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1415 - - - A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP mess… - CVE-2024-24442 2025-01-25 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1416 5.4 MEDIUM
Network
gambit stackable The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block in all versions up to, and including, 3.1… CWE-79
Cross-site Scripting
CVE-2024-12117 2025-01-25 04:05 2025-01-22 Show GitHub Exploit DB Packet Storm
1417 5.4 MEDIUM
Network
aipower aipower The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector(). This makes it p… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-13360 2025-01-25 03:58 2025-01-22 Show GitHub Exploit DB Packet Storm
1418 8.8 HIGH
Network
aipower aipower The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including… CWE-862
 Missing Authorization
CVE-2024-13361 2025-01-25 03:55 2025-01-22 Show GitHub Exploit DB Packet Storm
1419 7.5 HIGH
Network
open5gs open5gs A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. CWE-617
 Reachable Assertion
CVE-2024-24427 2025-01-25 03:47 2025-01-22 Show GitHub Exploit DB Packet Storm
1420 7.5 HIGH
Network
open5gs open5gs A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. CWE-617
 Reachable Assertion
CVE-2024-24428 2025-01-25 03:44 2025-01-22 Show GitHub Exploit DB Packet Storm