Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197911 6.9 警告 bkleineidam - libpam-mount の passwdehd における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5138 2012-06-26 16:03 2008-11-18 Show GitHub Exploit DB Packet Storm
197912 7.5 危険 developiteasy - Develop It Easy News And Article System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5131 2012-06-26 16:03 2008-11-18 Show GitHub Exploit DB Packet Storm
197913 4.3 警告 boutikone - BoutikOne CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5126 2012-06-26 16:03 2008-11-17 Show GitHub Exploit DB Packet Storm
197914 6.8 警告 castillocentral - CCleague Pro の admin.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5125 2012-06-26 16:03 2008-11-17 Show GitHub Exploit DB Packet Storm
197915 6.8 警告 castillocentral - CCleague Pro の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5123 2012-06-26 16:03 2008-11-17 Show GitHub Exploit DB Packet Storm
197916 7.5 危険 Episerver - Ektron CMS400.NET における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5122 2012-06-26 16:03 2008-11-17 Show GitHub Exploit DB Packet Storm
197917 7.2 危険 ブルーコートシステムズ
シトリックス・システムズ
シスコシステムズ
SafeNet, Inc		 - Cisco VPN Client などの製品で使用される dne2000.sys における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5121 2012-06-26 16:03 2008-07-18 Show GitHub Exploit DB Packet Storm
197918 9.3 危険 balabit - syslog-ng における intented jail を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5110 2012-06-26 16:03 2008-11-17 Show GitHub Exploit DB Packet Storm
197919 7.2 危険 dcgrendel
Canonical		 - Ubuntu におけるログイン制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-5104 2012-06-26 16:03 2008-11-13 Show GitHub Exploit DB Packet Storm
197920 7.2 危険 dcgrendel
Canonical		 - Ubuntu の VMBuilder におけるログイン制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-5103 2012-06-26 16:03 2008-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1471 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Busters Passwordless WP – Login with your glance or fingerprint allows Reflected XSS. This iss… CWE-79
Cross-site Scripting 		CVE-2025-23792 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1472 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Clodeo Shipdeo allows Reflected XSS. This issue affects Shipdeo: from n/a through 1.2.8. CWE-79
Cross-site Scripting 		CVE-2025-23457 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1473 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Simple Locator allows Reflected XSS. This issue affects Simple Locator: from n/a through… CWE-79
Cross-site Scripting 		CVE-2025-22513 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1474 - - - Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by … - CVE-2024-11348 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1475 8.9 HIGH
Network 		- - A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end gener… CWE-79
Cross-site Scripting 		CVE-2022-4975 2025-01-27 23:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1476 - - - A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON a… CWE-476
 NULL Pointer Dereference 		CVE-2025-0696 2025-01-27 20:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1477 - - - An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2025-0695 2025-01-27 20:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1478 4.4 MEDIUM
Local 		- - A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The m… CWE-404
CWE-400
 Improper Resource Shutdown or Release
 Uncontrolled Resource Consumption 		CVE-2024-12345 2025-01-27 20:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1479 - - - Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload"… CWE-23
 Relative Path Traversal 		CVE-2024-52012 2025-01-27 18:15 2025-01-27 Show GitHub Exploit DB Packet Storm
1480 - - - Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemConfigSetService" component (the default in "standalone" or "u… CWE-250
 Execution with Unnecessary Privileges 		CVE-2025-24814 2025-01-27 18:15 2025-01-27 Show GitHub Exploit DB Packet Storm