Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 8, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207491 9.3 危険 Mozilla Foundation - Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2010-1028 2010-04-2 14:05 2010-03-19 Show GitHub Exploit DB Packet Storm
207492 5 警告 富士通
アクセラテクノロジ
- Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性 CWE-200
情報漏えい
- 2010-04-2 14:05 2010-03-10 Show GitHub Exploit DB Packet Storm
207493 1.9 注意 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3556 2010-04-2 14:02 2010-01-19 Show GitHub Exploit DB Packet Storm
207494 10 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2009-4538 2010-04-2 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
207495 6.6 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3939 2010-04-2 14:00 2009-11-16 Show GitHub Exploit DB Packet Storm
207496 6.6 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3889 2010-04-2 14:00 2009-11-16 Show GitHub Exploit DB Packet Storm
207497 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の hfs サブシステムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4020 2010-04-2 13:59 2009-12-4 Show GitHub Exploit DB Packet Storm
207498 4.7 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の drivers/firewire/ohci.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4138 2010-04-2 13:58 2009-12-16 Show GitHub Exploit DB Packet Storm
207499 4.9 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の fuse_direct_io 関数におけるサービス運用妨害 (DoS)の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4021 2010-04-2 13:58 2009-11-25 Show GitHub Exploit DB Packet Storm
207500 4.9 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の arch/x86/ia32/ia32entry.S におけるレジスタ値を読み取られる脆弱性 CWE-200
情報漏えい
CVE-2009-2910 2010-04-2 13:56 2009-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 8, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lich_wang WP-tagMaker allows Reflected XSS.This issue affects WP-tagMaker: from n/a through 0.2.2. New CWE-79
Cross-site Scripting
CVE-2025-22338 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
62 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md. Rajib Dewan Opencart Product in WP allows Reflected XSS.This issue affects Opencart Product i… New CWE-79
Cross-site Scripting
CVE-2025-22335 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
63 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gravity Master Custom Field For WP Job Manager allows Reflected XSS.This issue affects Custom Fie… New CWE-79
Cross-site Scripting
CVE-2025-22294 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
64 - - - ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding t… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2025-21624 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
65 - - - ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which resul… New CWE-22
CWE-306
Path Traversal
Missing Authentication for Critical Function
CVE-2025-21623 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
66 - - - ClipBucket V5 provides open source video hosting with PHP. During the user avatar upload workflow, a user can choose to upload and change their avatar at any time. During deletion, ClipBucket checks … New CWE-22
Path Traversal
CVE-2025-21622 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
67 - - - A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /process_login.php. The manipulation of the argu… New CWE-89
CWE-74
SQL Injection
Injection
CVE-2025-0298 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
68 - - - A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /detail.php. The manipulation of the argument id… New CWE-89
CWE-74
SQL Injection
Injection
CVE-2025-0297 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
69 - - - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t… New - CVE-2025-0247 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
70 - - - When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.* *Note: This issue … New - CVE-2025-0246 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm