Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197821 6.8 警告 drennansoft - My Simple Forum の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5604 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
197822 6.8 警告 bonzacart - Bonza Cart の admin/ad_settings.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5567 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
197823 6.8 警告 dinkumsoft - DL PayCart の admin/settings.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5565 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
197824 7.8 危険 アルバネットワークス株式会社 - Aruba Mobility Controller におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5563 2012-06-26 16:03 2008-12-8 Show GitHub Exploit DB Packet Storm
197825 5 警告 aspapps - ASPPortal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5562 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
197826 5 警告 dazzlindonna - PostEcards におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5560 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
197827 7.5 危険 dazzlindonna - PostEcards の sendcard.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5559 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
197828 4.3 警告 Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2008-5558 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
197829 9.3 危険 ESET
マイクロソフト		 - ESet NOD32 Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5534 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
197830 9.3 危険 フォーティネット
マイクロソフト		 - Fortinet Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5531 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1841 - - - A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to an arbitrary html code. An… - CVE-2024-39272 2025-02-7 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1842 - - - MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript… CWE-79
Cross-site Scripting 		CVE-2025-24981 2025-02-7 03:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1843 - - - mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malic… CWE-441
CWE-288
Confused Deputy
Authentication Bypass Using an Alternate Path or Channel 		CVE-2025-23217 2025-02-7 03:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1844 - - - A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter. - CVE-2025-25181 2025-02-7 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1845 - - - Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be us… - CVE-2024-57968 2025-02-7 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1846 5.3 MEDIUM
Local 		- - A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical. This vulnerability affects the function shouldAcceptNewConnection of the file … CWE-285
CWE-266
Improper Authorization
 Incorrect Privilege Assignment 		CVE-2025-1078 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1847 - - - PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s brows… - CVE-2024-57427 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1848 - - - Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Securi… - CVE-2024-13614 2025-02-7 02:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1849 - - - A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57086 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
1850 - - - A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. - CVE-2024-57080 2025-02-7 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm