Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 21, 2025, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
641 6.1 警告
Network
FreeScout FreeScout FreeScout におけるクロスサイトスクリプティングの脆弱性 CWE-74
CWE-79
CVE-2024-34697 2025-01-16 15:49 2024-05-14 Show GitHub Exploit DB Packet Storm
642 6.3 警告
Network
FreeScout FreeScout FreeScout におけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
CWE-1321
CVE-2024-34698 2025-01-16 15:49 2024-05-14 Show GitHub Exploit DB Packet Storm
643 4.3 警告
Network
Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-1502 2025-01-16 15:49 2024-03-21 Show GitHub Exploit DB Packet Storm
644 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-2823 2025-01-16 15:49 2024-03-22 Show GitHub Exploit DB Packet Storm
645 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-3144 2025-01-16 15:48 2024-04-2 Show GitHub Exploit DB Packet Storm
646 6.5 警告
Network
Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-3553 2025-01-16 15:48 2024-05-2 Show GitHub Exploit DB Packet Storm
647 9 緊急
Network
FreeScout FreeScout FreeScout における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-29185 2025-01-16 15:48 2024-03-22 Show GitHub Exploit DB Packet Storm
648 7.8 重要
Local
クアルコム Snapdragon 8cx Compute Platform ファームウェア
snapdragon 8cx gen 3 ファームウェア
QCA6391 ファームウェア
fastconnect 6900 ファームウェア
Snapdragon 8cx&nb…
複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-120
CWE-787
CVE-2023-43540 2025-01-16 15:46 2023-09-19 Show GitHub Exploit DB Packet Storm
649 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用
CVE-2021-47554 2025-01-16 15:46 2021-11-24 Show GitHub Exploit DB Packet Storm
650 7.8 重要
Local
クアルコム APQ8030 ファームウェア
APQ8064 ファームウェア
9206 lte modem ファームウェア
c-v2x 9150 ファームウェア
9207 lte modem ファームウェア
CSRA6640 ファームウェア
APQ8037 …
複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-787
CWE-823
CVE-2023-33066 2025-01-16 15:43 2023-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276211 - loris hotel_reservation_system Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotel_name pa… CWE-79
Cross-site Scripting
CVE-2008-0774 2008-09-6 06:35 2008-02-14 Show GitHub Exploit DB Packet Storm
276212 - freebsd freebsd The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0777 2008-09-6 06:35 2008-02-15 Show GitHub Exploit DB Packet Storm
276213 - sam_lantinga splitvt misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0162 2008-09-6 06:34 2008-02-23 Show GitHub Exploit DB Packet Storm
276214 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting
CVE-2008-0178 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
276215 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP heade… CWE-79
Cross-site Scripting
CVE-2008-0179 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
276216 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field … CWE-79
Cross-site Scripting
CVE-2008-0180 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
276217 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message. CWE-79
Cross-site Scripting
CVE-2008-0181 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
276218 - liferay liferay_enterprise_portal Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated… CWE-352
 Origin Validation Error
CVE-2008-0182 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
276219 - ngircd ngircd ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference. NVD-CWE-Other
CVE-2008-0285 2008-09-6 06:34 2008-01-16 Show GitHub Exploit DB Packet Storm
276220 - pmachine pmachine_pro Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter. CWE-79
Cross-site Scripting
CVE-2008-0334 2008-09-6 06:34 2008-01-18 Show GitHub Exploit DB Packet Storm