Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197671 4.3 警告 camera life - Camera Life の topic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6087 2012-06-26 16:10 2009-02-6 Show GitHub Exploit DB Packet Storm
197672 7.5 危険 camera life - Camera Life の album.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6086 2012-06-26 16:10 2009-02-6 Show GitHub Exploit DB Packet Storm
197673 6.8 警告 matteoiammarrone - Iamma Simple Gallery の pages/download.php における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6084 2012-06-26 16:10 2009-02-6 Show GitHub Exploit DB Packet Storm
197674 7.5 危険 Drupal - Drupal 用の EveryBlog モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6137 2012-06-26 16:10 2008-10-8 Show GitHub Exploit DB Packet Storm
197675 5 警告 codecall
Joomla!		 - Joomla! の ionfiles コンポーネントの download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6080 2012-06-26 16:10 2009-02-6 Show GitHub Exploit DB Packet Storm
197676 10 危険 Enlightenment - imlib2 における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2008-6079 2012-06-26 16:10 2009-02-6 Show GitHub Exploit DB Packet Storm
197677 5 警告 GraphicsMagick - GraphicsMagick におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-6072 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197678 10 危険 GraphicsMagick - GraphicsMagick の DecodeImage 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6071 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197679 9.3 危険 GraphicsMagick - GraphicsMagick の ReadPALMImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-6070 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197680 6.8 警告 e107.org
123flashchat		 - eChat プラグインの e107chat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6069 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1871 - - - GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to s… - CVE-2024-7595 2025-02-7 00:56 2025-02-6 Show GitHub Exploit DB Packet Storm
1872 - - - Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is … - CVE-2023-5878 2025-02-7 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1873 - - - The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version … CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2022-31764 2025-02-7 00:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1874 - - - The The CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution via the g… CWE-94
Code Injection 		CVE-2024-13487 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1875 - - - The LikeBot WordPress plugin through 0.85 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS… - CVE-2025-0522 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1876 - - - OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns. - CVE-2025-1066 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1877 - - - A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57085 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1878 - - - A prototype pollution in the lib.createUploader function of @rpldy/uploader v1.8.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57082 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1879 - - - A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57081 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1880 - - - A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57079 2025-02-7 00:15 2025-02-6 Show GitHub Exploit DB Packet Storm