Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196971 7.5 危険 Activewebsoftwares - ASPReferral の Merchantsadd.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6889 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
196972 7.5 危険 easysitenetwork - EasySiteNetwork Free Jokes Website の joke.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6880 2012-06-26 16:10 2009-07-30 Show GitHub Exploit DB Packet Storm
196973 4.3 警告 Apache Software Foundation - Apache Roller におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6879 2012-06-26 16:10 2009-07-30 Show GitHub Exploit DB Packet Storm
196974 4.3 警告 editeurscripts - EsPartenaires の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6876 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
196975 7.5 危険 aspsiteware - ASP SiteWare autoDealer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6874 2012-06-26 16:10 2009-07-24 Show GitHub Exploit DB Packet Storm
196976 7.5 危険 Activewebsoftwares - Active Web Mail における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6873 2012-06-26 16:10 2009-07-23 Show GitHub Exploit DB Packet Storm
196977 5 警告 aspthai.net - ASPThai.NET ASPThai Forums におけるデータベースをダウンロードされる脆弱性 CWE-200
情報漏えい
CVE-2008-6872 2012-06-26 16:10 2009-07-23 Show GitHub Exploit DB Packet Storm
196978 4.3 警告 editeurscripts - EditeurScripts EsBaseAdmin の default/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6868 2012-06-26 16:10 2009-07-23 Show GitHub Exploit DB Packet Storm
196979 6.8 警告 AVAST Software s.r.o. - avast! Linux Home Edition におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6846 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
196980 5 警告 ClamAV - ClamAV のアンパック機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-6845 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 28, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 8.8 HIGH
Network
jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id. CWE-89
SQL Injection
CVE-2024-57770 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
502 8.8 HIGH
Network
jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser. CWE-89
SQL Injection
CVE-2024-57769 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
503 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in basteln3rk Save & Import Image from URL allows Reflected XSS. This issue affects Save & Import Im… CWE-79
Cross-site Scripting
CVE-2025-23960 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
504 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tatsuya Fukata, Alexander Ovsov wp-flickr-press allows Reflected XSS. This issue affects wp-flick… CWE-79
Cross-site Scripting
CVE-2025-23894 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
505 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SuryaBhan Custom Coming Soon allows Reflected XSS. This issue affects Custom Coming Soon: from n/… CWE-79
Cross-site Scripting
CVE-2025-23836 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
506 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Legal + allows Reflected XSS. This issue affects Legal +: from n/a through 1.0. CWE-79
Cross-site Scripting
CVE-2025-23835 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
507 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Links/Problem Reporter allows Reflected XSS. This issue affects Links/Problem Reporter: … CWE-79
Cross-site Scripting
CVE-2025-23834 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
508 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sayocode SC Simple Zazzle allows Reflected XSS. This issue affects SC Simple Zazzle: from n/a thr… CWE-79
Cross-site Scripting
CVE-2025-23733 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
509 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound FLX Dashboard Groups allows Reflected XSS. This issue affects FLX Dashboard Groups: from… CWE-79
Cross-site Scripting
CVE-2025-23730 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
510 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fures XTRA Settings allows Reflected XSS. This issue affects XTRA Settings: from n/a through 2.1.… CWE-79
Cross-site Scripting
CVE-2025-23729 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm