Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196731 4.3 警告 anantasoft - Anantasoft Gazelle CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3171 2012-06-26 16:18 2009-09-11 Show GitHub Exploit DB Packet Storm
196732 9.3 危険 aimp - AIMP2 Audio Converter におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3170 2012-06-26 16:18 2009-09-11 Show GitHub Exploit DB Packet Storm
196733 4.3 警告 anantasoft - Anantasoft Gazelle CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3167 2012-06-26 16:18 2009-09-11 Show GitHub Exploit DB Packet Storm
196734 7.5 危険 carsten wulff - simplePHPWeb の admin/files.php における管理操作を実行される脆弱性 CWE-287
不適切な認証
CVE-2009-3158 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
196735 2.1 注意 Drupal
Karen Stevenson
- Drupal 用 の Date モジュールの Date Tools サブモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3156 2012-06-26 16:18 2009-07-29 Show GitHub Exploit DB Packet Storm
196736 4.3 警告 almondsoft
Joomla!
- Joomla! の aclassf コンポーネントの gmap.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3155 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
196737 7.5 危険 almondsoft
Joomla!
- Joomla! の aclassf コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3154 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
196738 4.3 警告 curveriderhq - Elgg の _css/js.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3149 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
196739 4.3 警告 allenthusiast - ReviewPost Pro vB3 の showproduct.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3147 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
196740 4.3 警告 articlefriend - ArticleFriend Script の search_advance.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3146 2012-06-26 16:18 2009-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 - - - A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs o… - CVE-2025-24402 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1232 - - - Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (t… - CVE-2025-24401 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1233 - - - Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. - CVE-2025-24398 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1234 - - - A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS)… - CVE-2024-24424 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1235 - - - A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of S… - CVE-2024-24421 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1236 - - - A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a c… - CVE-2024-24420 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1237 - - - A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to c… - CVE-2023-37028 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1238 - - - Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to cra… - CVE-2023-37027 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1239 - - - OpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to… - CVE-2024-24445 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1240 - - - pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php. - CVE-2023-27113 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm