Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197401 7.2 危険 Avira - 複数の Avira 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6962 2012-06-26 16:10 2009-08-13 Show GitHub Exploit DB Packet Storm
197402 9.3 危険 chilkatsoft - ChilkatSocket.dll の ChilkatSocket.ChilkatSocket.1 における任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-6959 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197403 6.5 警告 Comsenz Technology - Crossday Discuz! Board の wap/index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6958 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197404 7.5 危険 Discuz - Crossday Discuz! Board の member.php における任意ユーザのパスワードをリセットされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6957 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197405 7.5 危険 cms.maury91 - MauryCMS の Rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6952 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197406 7.5 危険 cms.maury91 - MauryCMS における任意のファイルをアップロードされる脆弱性 CWE-287
不適切な認証 		CVE-2008-6951 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197407 6.8 警告 Open Dynamics - Collabtive におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6949 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197408 6.5 警告 Open Dynamics - Collabtive における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6948 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197409 7.5 危険 Open Dynamics - Collabtive における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6947 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
197410 4.3 警告 Open Dynamics - Collabtive の manageproject.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6946 2012-06-26 16:10 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1721 - - - In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may contain the environment variables from the workflow run, including any secrets that … CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2025-24362 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1722 5.4 MEDIUM
Network 		ayecode ketchup_shortcodes The Ketchup Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spacer' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sani… CWE-79
Cross-site Scripting 		CVE-2024-13590 2025-01-25 03:09 2025-01-22 Show GitHub Exploit DB Packet Storm
1723 4.3 MEDIUM
Network 		quantumcloud wpot The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all versio… CWE-862
 Missing Authorization 		CVE-2024-12879 2025-01-25 03:07 2025-01-22 Show GitHub Exploit DB Packet Storm
1724 - - - Updatecli is a tool used to apply file update strategies. Prior to version 0.93.0, private maven repository credentials may be leaked in application logs in case of unsuccessful retrieval operation. … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2025-24355 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1725 - - - ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute… CWE-134
CWE-749
Use of Externally-Controlled Format String
 Exposed Dangerous Method or Function 		CVE-2025-24359 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1726 - - - An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbit… - CVE-2025-23222 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1727 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.374, the missing authorization allows an authenticated user to retrieve… CWE-200
CWE-862
Information Exposure
 Missing Authorization 		CVE-2025-22612 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1728 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to escalat… CWE-862
 Missing Authorization 		CVE-2025-22611 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1729 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to fetch t… CWE-862
 Missing Authorization 		CVE-2025-22610 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1730 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to attach … CWE-862
 Missing Authorization 		CVE-2025-22609 2025-01-25 02:15 2025-01-25 Show GitHub Exploit DB Packet Storm