Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196701 5.8 警告 gradman - GradMan の info.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0393 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196702 7.5 危険 alilg - aliTalk の inc/elementz.php における任意のユーザアカウントを追加される脆弱性 CWE-287
不適切な認証 		CVE-2008-0391 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196703 7.5 危険 AuraCMS - AuraCMS のstat.php における online.db.txt へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0390 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196704 7.8 危険 Firebird Project - Firebird SQL における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-0387 2012-06-26 15:54 2008-01-28 Show GitHub Exploit DB Packet Storm
196705 10 危険 digital data communications - RtspVapgDecoder.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0380 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196706 9.3 危険 マイクロソフト
ビジネスオブジェクツ		 - Crystal Reports XI の EnterpriseControls.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0379 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196707 5 警告 8e6 Technologies - 8e6 R3000 Internet Filter におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0372 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196708 6.8 警告 alilg - aliTalk における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0371 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196709 4.3 警告 cPanel - cPanel の dohtaccess.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0370 2012-06-26 15:54 2008-01-22 Show GitHub Exploit DB Packet Storm
196710 7.2 危険 core security technologies - CORE FORCE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0366 2012-06-26 15:54 2008-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 - - - Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals. New - CVE-2024-29971 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
252 - - - Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals. New - CVE-2024-29970 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
253 - - - Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions. New - CVE-2024-25371 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
254 - - - FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. New - CVE-2025-23022 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
255 - - - An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" G… New - CVE-2024-57687 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
256 - - - Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function. New - CVE-2024-51229 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
257 - - - Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQ… New - CVE-2024-54762 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
258 - - - BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. New - CVE-2024-54761 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
259 5.5 MEDIUM
Local 		qualcomm ar8035_firmware
c-v2x_9150_firmware
csrb31024_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
msm8996au_firmware
qam8295p_firmware
qca63… 		Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. Update CWE-125
Out-of-bounds Read 		CVE-2024-33067 2025-01-11 00:39 2025-01-6 Show GitHub Exploit DB Packet Storm
260 5.5 MEDIUM
Local 		qualcomm qam8255p_firmware
qam8295p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qca6595_firmware
qca6595au_firmware
qca6696_firmware
qca6698aq_firmware
sa8255p_fi… 		information disclosure while invoking the mailbox read API. Update CWE-125
Out-of-bounds Read 		CVE-2024-43063 2025-01-11 00:37 2025-01-6 Show GitHub Exploit DB Packet Storm