Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197391 7.2 危険 Avira - 複数の Avira 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6962 2012-06-26 16:10 2009-08-13 Show GitHub Exploit DB Packet Storm
197392 9.3 危険 chilkatsoft - ChilkatSocket.dll の ChilkatSocket.ChilkatSocket.1 における任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-6959 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197393 6.5 警告 Comsenz Technology - Crossday Discuz! Board の wap/index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6958 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197394 7.5 危険 Discuz - Crossday Discuz! Board の member.php における任意ユーザのパスワードをリセットされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6957 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197395 7.5 危険 cms.maury91 - MauryCMS の Rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6952 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197396 7.5 危険 cms.maury91 - MauryCMS における任意のファイルをアップロードされる脆弱性 CWE-287
不適切な認証 		CVE-2008-6951 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197397 6.8 警告 Open Dynamics - Collabtive におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6949 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197398 6.5 警告 Open Dynamics - Collabtive における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6948 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197399 7.5 危険 Open Dynamics - Collabtive における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6947 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197400 4.3 警告 Open Dynamics - Collabtive の manageproject.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6946 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21490 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1072 6.1 MEDIUM
Network 		- - Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vu… - CVE-2025-21489 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1073 5.4 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable … - CVE-2024-21245 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1074 7.8 HIGH
Local 		google android In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv… CWE-787
 Out-of-bounds Write 		CVE-2018-9389 2025-01-24 04:56 2025-01-18 Show GitHub Exploit DB Packet Storm
1075 5.5 MEDIUM
Local 		google android In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… CWE-862
 Missing Authorization 		CVE-2018-9406 2025-01-24 04:55 2025-01-18 Show GitHub Exploit DB Packet Storm
1076 5.5 MEDIUM
Local 		google android In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service w… NVD-CWE-noinfo
CVE-2017-13322 2025-01-24 04:54 2025-01-18 Show GitHub Exploit DB Packet Storm
1077 - - - An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Serv… - CVE-2024-24443 2025-01-24 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1078 - - - A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an… - CVE-2023-37024 2025-01-24 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1079 - - - Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can specify an arbitrary role. It allows the user to use… CWE-269
 Improper Privilege Management 		CVE-2025-24353 2025-01-24 03:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1080 - - - @fastify/multipart is a Fastify plugin for parsing the multipart content-type. Prior to versions 8.3.1 and 9.0.3, the `saveRequestFiles` function does not delete the uploaded temporary files when use… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2025-24033 2025-01-24 03:15 2025-01-24 Show GitHub Exploit DB Packet Storm