Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
221 8.8 重要
Network
jfinaloa project jfinaloa jfinaloa project の jfinaloa における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-57769 2025-01-23 11:48 2025-01-16 Show GitHub Exploit DB Packet Storm
222 8.8 重要
Network
jfinaloa project jfinaloa jfinaloa project の jfinaloa における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-57770 2025-01-23 11:48 2025-01-16 Show GitHub Exploit DB Packet Storm
223 8.8 重要
Network
code-projects Online  Shoe Store code-projects の Online Shoe Store における脆弱性 New CWE-266
CWE-284
CWE-noinfo
CVE-2025-0206 2025-01-23 11:48 2025-01-4 Show GitHub Exploit DB Packet Storm
224 7.5 重要
Network
Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
CWE-770
CVE-2024-3382 2025-01-23 11:48 2024-04-10 Show GitHub Exploit DB Packet Storm
225 6.1 警告
Network
フォーティネット FortiAuthenticator フォーティネットの FortiAuthenticator におけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト
CVE-2024-23664 2025-01-23 11:47 2024-05-14 Show GitHub Exploit DB Packet Storm
226 9.8 緊急
Network
Zephyr Project Zephyr Zephyr Project の Zephyr における境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2023-6749 2025-01-23 11:46 2023-12-12 Show GitHub Exploit DB Packet Storm
227 8.8 重要
Network
podsfoundation pods podsfoundation の WordPress 用 pods における脆弱性 New CWE-noinfo
情報不足
CVE-2023-6999 2025-01-23 11:46 2023-12-20 Show GitHub Exploit DB Packet Storm
228 9.8 緊急
Network
Cozmoslabs Membership & Content Restriction - Paid Member Subscriptions Cozmoslabs の WordPress 用 Membership & Content Restriction - Paid Member Subscriptions における脆弱性 New CWE-287
CWE-Other
CVE-2024-12919 2025-01-23 11:46 2024-12-24 Show GitHub Exploit DB Packet Storm
229 5.4 警告
Network
exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1414 2025-01-23 11:46 2024-03-13 Show GitHub Exploit DB Packet Storm
230 6.5 警告
Network
HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2024-1974 2025-01-23 11:46 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274941 - elvinbts elvinbts SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field. CWE-89
SQL Injection
CVE-2009-2128 2009-06-22 13:00 2009-06-20 Show GitHub Exploit DB Packet Storm
274942 - pagedowntech pdshoppro Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting
CVE-2009-2032 2009-06-20 14:29 2009-06-13 Show GitHub Exploit DB Packet Storm
274943 - apple safari Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate. CWE-255
Credentials Management
CVE-2009-1682 2009-06-19 14:32 2009-06-10 Show GitHub Exploit DB Packet Storm
274944 - apple safari CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by p… CWE-94
Code Injection
CVE-2009-1704 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
274945 - apple safari The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit o… CWE-200
Information Exposure
CVE-2009-1706 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
274946 - apple safari Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain… NVD-CWE-Other
CVE-2009-1708 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
274947 - apple safari CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files. CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-1716 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
274948 - sun opensolaris Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) v… NVD-CWE-noinfo
CVE-2009-2012 2009-06-19 14:32 2009-06-10 Show GitHub Exploit DB Packet Storm
274949 - sun opensolaris smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes. CWE-200
Information Exposure
CVE-2009-2031 2009-06-19 14:32 2009-06-12 Show GitHub Exploit DB Packet Storm
274950 - cisco ace_4710
application_control_engine_module
Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2… NVD-CWE-noinfo
CVE-2009-0623 2009-06-19 13:00 2009-02-27 Show GitHub Exploit DB Packet Storm