Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196901 7.5 危険 barcodephp - barcodegen の image.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5993 2012-06-26 16:10 2009-01-28 Show GitHub Exploit DB Packet Storm
196902 6.8 警告 eduforge - emergecolab の connect/init.inc におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5990 2012-06-26 16:10 2009-01-28 Show GitHub Exploit DB Packet Storm
196903 6.9 警告 Csound - Csound の VST プラグインにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2008-5986 2012-06-26 16:10 2009-01-28 Show GitHub Exploit DB Packet Storm
196904 6.9 警告 dia - Dia の Python プラグインにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2008-5984 2012-06-26 16:10 2009-01-28 Show GitHub Exploit DB Packet Storm
196905 10 危険 BMC Software - BMC PATROL Agent におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-5982 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
196906 7.5 危険 Activewebsoftwares - Active Price Comparison の links.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5975 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
196907 7.5 危険 Activewebsoftwares - Active Price Comparison の login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5974 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
196908 7.5 危険 Activewebsoftwares - Active Web Mail の login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5973 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
196909 7.5 危険 Activewebsoftwares - Active Business Directory の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5972 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
196910 7.5 危険 globsy - Globsy の globsy_edit.php における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5966 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Typomedia Foundation WordPress Custom Sidebar allows Blind SQL Injection.This issue affects WordP… CWE-89
SQL Injection 		CVE-2025-23912 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
852 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solidres Team Solidres – Hotel booking plugin allows SQL Injection.This issue affects Solidres – … CWE-89
SQL Injection 		CVE-2025-23911 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
853 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Compare Ninja allows Stored XSS.This issue affects Compare Ninja: from n/a through 2… CWE-79
Cross-site Scripting 		CVE-2025-23909 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
854 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rami Yushuvaev Pastebin allows Stored XSS.This issue affects Pastebin: from n/a through 1.5. CWE-79
Cross-site Scripting 		CVE-2025-23908 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
855 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in closed SOCIAL.NINJA allows Stored XSS. This issue affects SOCIAL.NINJA: from n/a through 0.2. CWE-79
Cross-site Scripting 		CVE-2025-23907 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
856 - - - Cross-Site Request Forgery (CSRF) vulnerability in Taras Dashkevych Error Notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through 0.2.7. CWE-352
 Origin Validation Error 		CVE-2025-23902 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
857 - - - Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal GravatarLocalCache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through 1.1.2. CWE-352
 Origin Validation Error 		CVE-2025-23901 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
858 - - - Cross-Site Request Forgery (CSRF) vulnerability in Genkisan Genki Announcement allows Cross Site Request Forgery.This issue affects Genki Announcement: from n/a through 1.4.1. CWE-352
 Origin Validation Error 		CVE-2025-23900 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
859 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BnB Select Ltd Bookalet allows Stored XSS.This issue affects Bookalet: from n/a through 1.0.3. CWE-79
Cross-site Scripting 		CVE-2025-23899 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
860 - - - Cross-Site Request Forgery (CSRF) vulnerability in Ivo Brett – ApplyMetrics Apply with LinkedIn buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through 2.3. CWE-352
 Origin Validation Error 		CVE-2025-23898 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm