Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197311 7.5 危険 ASP indir - Pcshey Portal の kategori.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3495 2012-06-26 16:02 2008-08-6 Show GitHub Exploit DB Packet Storm
197312 7.8 危険 8e6 Technologies - 8e6 R3000 Internet Filter におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3494 2012-06-26 16:02 2008-08-6 Show GitHub Exploit DB Packet Storm
197313 5 警告 americasarmy - America's Army におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3492 2012-06-26 16:02 2008-08-6 Show GitHub Exploit DB Packet Storm
197314 6.5 警告 e-topbiz - E-topbiz Online Dating の members/mail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3490 2012-06-26 16:02 2008-08-6 Show GitHub Exploit DB Packet Storm
197315 7.5 危険 Coppermine Photo Gallery - CPG の include/functions.inc.php の user_get_profile 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3486 2012-06-26 16:02 2008-08-6 Show GitHub Exploit DB Packet Storm
197316 7.2 危険 シトリックス・システムズ - Citrix MetaFrame Presentation Server における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3485 2012-06-26 16:02 2008-08-6 Show GitHub Exploit DB Packet Storm
197317 7.5 危険 estoreaff - eStoreAff における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3484 2012-06-26 16:02 2008-08-5 Show GitHub Exploit DB Packet Storm
197318 7.5 危険 Coppermine Photo Gallery - CPG の themes/sample/theme.php における重要な情報を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3481 2012-06-26 16:02 2008-08-5 Show GitHub Exploit DB Packet Storm
197319 9.3 危険 anzio - Anzio WePO ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3480 2012-06-26 16:02 2008-08-29 Show GitHub Exploit DB Packet Storm
197320 6.8 警告 endonesia - eNdonesia の Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3452 2012-06-26 16:02 2008-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 - - - An issue in the exp_atom component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. - CVE-2024-57624 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
872 - - - An issue in the exp_bin component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. - CVE-2024-57622 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
873 - - - An issue in the GDKanalytical_correlation component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. - CVE-2024-57621 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
874 9.8 CRITICAL
Network 		apache openmeetings Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.htm… - CVE-2024-54676 2025-01-16 00:50 2025-01-8 Show GitHub Exploit DB Packet Storm
875 8.7 HIGH
Network 		- - A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authen… CWE-79
Cross-site Scripting 		CVE-2024-47140 2025-01-16 00:15 2025-01-16 Show GitHub Exploit DB Packet Storm
876 8.7 HIGH
Network 		- - A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would nee… CWE-79
Cross-site Scripting 		CVE-2024-47002 2025-01-16 00:15 2025-01-16 Show GitHub Exploit DB Packet Storm
877 8.7 HIGH
Network 		- - A cross-site scripting (xss) vulnerability exists in the weather map editor functionality of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code executio… CWE-79
Cross-site Scripting 		CVE-2024-45061 2025-01-16 00:15 2025-01-16 Show GitHub Exploit DB Packet Storm
878 9.8 CRITICAL
Network 		- - A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the… CWE-122
Heap-based Buffer Overflow 		CVE-2024-12084 2025-01-16 00:15 2025-01-16 Show GitHub Exploit DB Packet Storm
879 - - - OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a syst… - CVE-2024-5198 2025-01-16 00:15 2025-01-15 Show GitHub Exploit DB Packet Storm
880 - - - Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) - CVE-2025-0448 2025-01-16 00:15 2025-01-15 Show GitHub Exploit DB Packet Storm