Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198051 6.8 警告 cruxsoftware - Crux Gallery の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-4483 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
198052 7.2 危険 GNU Project - ibackup における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4475 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
198053 7.2 危険 FreeRADIUS - freeradius の freeradius-dialupadmin における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4474 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
198054 9.3 危険 オートデスク株式会社 - Revit Architecture で使用される LiveUpdate ActiveX コントロールの UpdateEngine クラスにおける任意のプログラムを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-4472 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
198055 9.3 危険 オートデスク株式会社 - Revit Architecture 2009 SP2 で使用される DWF Viewer ActiveX コントロール (AdView.dll) の CExpressViewerControl クラスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-4471 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
198056 7.5 危険 extrovert software - eXtrovert Thyme の groups モジュールの pick_users.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4459 2012-06-26 16:02 2008-10-6 Show GitHub Exploit DB Packet Storm
198057 7.5 危険 ephpscripts - E-Php B2B Trading Marketplace Script の listings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4458 2012-06-26 16:02 2008-10-6 Show GitHub Exploit DB Packet Storm
198058 9.3 危険 dspicture - GdPicture Light Imaging Toolkit の GdPicture4S.Imaging ActiveX コントロールなどにおける任意のファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-4453 2012-06-26 16:02 2008-10-6 Show GitHub Exploit DB Packet Storm
198059 9 危険 cambridge computer corporation - Cambridge Computer Corporation vxFtpSrv におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4452 2012-06-26 16:02 2008-10-6 Show GitHub Exploit DB Packet Storm
198060 4.3 警告 domain group network - Domain Group Network GooCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4424 2012-06-26 16:02 2008-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1411 5.0 MEDIUM
Network
- - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argumen… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2025-0840 2025-01-30 05:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1412 - - - Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This issue affects FLXEON through <= 9.3.4. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-48852 2025-01-30 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1413 - - - Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4. CWE-1385
 Missing Origin Validation in WebSockets
CVE-2024-48849 2025-01-30 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1414 - - - A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious code into the query selector via the identity property in the message handling fun… - CVE-2024-10001 2025-01-30 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1415 - - - regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1. CWE-20
CWE-345
 Improper Input Validation 
 Insufficient Verification of Data Authenticity
CVE-2025-24882 2025-01-30 03:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1416 - - - Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC… CWE-276
Incorrect Default Permissions 
CVE-2025-24790 2025-01-30 03:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1417 - - - Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC… CWE-426
 Untrusted Search Path
CVE-2025-24789 2025-01-30 03:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1418 - - - snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File permissions checks of the temporary credential ca… CWE-281
 Improper Preservation of Permissions
CVE-2025-24791 2025-01-30 02:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1419 5.3 MEDIUM
Network
- - IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy. CWE-204
 Response Discrepancy Information Exposure
CVE-2023-37413 2025-01-30 02:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1420 4.4 MEDIUM
Network
- - IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls. CWE-250
 Execution with Unnecessary Privileges
CVE-2023-37412 2025-01-30 02:15 2025-01-30 Show GitHub Exploit DB Packet Storm