Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197301 6.8 警告 abledating - ABK-Soft AbleDating の search_results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6572 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
197302 4.3 警告 gallarific - Gallarific Free Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6567 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
197303 10 危険 8pussy - Octopussy における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2008-6566 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
197304 9.3 危険 Cerulean Studios - Trillian の XML 解析におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6563 2012-06-26 16:10 2009-03-31 Show GitHub Exploit DB Packet Storm
197305 10 危険 Aztech Group Ltd - Aztech ADSL2/2+ 4-port ルータの cgi-bin/script における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2008-6554 2012-06-26 16:10 2009-03-30 Show GitHub Exploit DB Packet Storm
197306 5.1 警告 e-vision - e-Vision CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6551 2012-06-26 16:10 2009-03-30 Show GitHub Exploit DB Packet Storm
197307 4.3 警告 davidbourrier - Glossaire の glossaire.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6550 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
197308 7.5 危険 formencode - python-formencode の schema.py におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-6547 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
197309 10 危険 alecwh - phpns における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2008-6546 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
197310 7.5 危険 comscripts - Web Server Creator Web Portal の news/include/createdb.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6545 2012-06-26 16:10 2009-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 30, 2025, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
511 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does … - CVE-2025-24025 2025-01-25 06:15 2025-01-25 Show GitHub Exploit DB Packet Storm
512 - - - Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component - CVE-2024-57556 2025-01-25 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
513 6.1 MEDIUM
Network
themify themify_builder The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, … CWE-79
Cross-site Scripting
CVE-2024-13319 2025-01-25 06:06 2025-01-22 Show GitHub Exploit DB Packet Storm
514 7.2 HIGH
Network
aipower aipower The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_conten… CWE-502
 Deserialization of Untrusted Data
CVE-2025-0428 2025-01-25 05:56 2025-01-22 Show GitHub Exploit DB Packet Storm
515 4.3 MEDIUM
Network
thimpress wp_hotel_booking The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_booking_load_order_user AJAX action in all versions up to, and in… CWE-862
 Missing Authorization
CVE-2024-13447 2025-01-25 05:53 2025-01-22 Show GitHub Exploit DB Packet Storm
516 7.2 HIGH
Network
aipower aipower The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_conten… CWE-502
 Deserialization of Untrusted Data
CVE-2025-0429 2025-01-25 05:51 2025-01-22 Show GitHub Exploit DB Packet Storm
517 7.3 HIGH
Network
gamipress gamipress The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs… CWE-94
Code Injection
CVE-2024-13495 2025-01-25 05:46 2025-01-22 Show GitHub Exploit DB Packet Storm
518 7.5 HIGH
Network
gamipress gamipress The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versi… CWE-89
SQL Injection
CVE-2024-13496 2025-01-25 05:45 2025-01-22 Show GitHub Exploit DB Packet Storm
519 7.3 HIGH
Network
gamipress gamipress The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_do_shortcode() fu… CWE-94
Code Injection
CVE-2024-13499 2025-01-25 05:37 2025-01-22 Show GitHub Exploit DB Packet Storm
520 3.5 LOW
Network
- - A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Managemen… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2025-0708 2025-01-25 05:15 2025-01-25 Show GitHub Exploit DB Packet Storm