Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197411 9 危険 freeSSHd - freeSSHd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6899 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
197412 9.3 危険 andres garcia - Andres Garcia Getleft の Getleft.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6897 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
197413 5 警告 3CX - 3CX Phone System の login.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6896 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197414 7.8 危険 3CX - 3CX Phone System におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-6895 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197415 4.3 警告 3CX - 3CX Phone System Free Edition の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6894 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197416 4.3 警告 マイクロソフト
Alt-N		 - Alt-N MDaemon WorldClient におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6893 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197417 4.3 警告 codetoad - ASP Forum Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6891 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197418 7.5 危険 codetoad - ASP Forum Script の messages.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6890 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197419 7.5 危険 Activewebsoftwares - ASPReferral の Merchantsadd.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6889 2012-06-26 16:10 2009-08-3 Show GitHub Exploit DB Packet Storm
197420 7.5 危険 easysitenetwork - EasySiteNetwork Free Jokes Website の joke.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6880 2012-06-26 16:10 2009-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1181 - - - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null Considering that in some… - CVE-2024-57915 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1182 - - - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bind This commit addresses an issue related to below kernel panic where panic_on_… - CVE-2024-57913 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1183 - - - WeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of documentos_funcionario.php. - CVE-2024-57033 2025-01-24 02:15 2025-01-18 Show GitHub Exploit DB Packet Storm
1184 8.8 HIGH
Network 		jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id. CWE-89
SQL Injection 		CVE-2024-57770 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
1185 - - - In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute syzbot found that TCA_FLOW_RSHIFT attribute was not validated. Right shit… - CVE-2025-21653 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1186 - - - In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs … - CVE-2025-21646 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1187 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' str… - CVE-2025-21640 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1188 8.8 HIGH
Network 		jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser. CWE-89
SQL Injection 		CVE-2024-57769 2025-01-24 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
1189 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21639 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm
1190 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21638 2025-01-24 02:15 2025-01-19 Show GitHub Exploit DB Packet Storm