脆弱性一覧
Show Search Menu
|
You can search the list of vulnerabilities managed by JVN (Japan Vulnerability Note). |
Update Date:July 2, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 651 | 9.8 |
緊急
Network |
日本電気 日立 Apache Software Foundation |
uCosminexus Application Server Express SpoolServer/ReportFiling Hitachi Ops Center Analyzer Hitachi Automation Director JP1/Performance Manage… |
Apache HTTP Server における HTTP リクエストスマグリングに関する脆弱性 |
CWE-444
HTTP Request Smuggling |
CVE-2022-22720 | 2023-12-12 16:47 | 2022-03-14 | Show | GitHub Exploit DB Packet Storm |
| 652 | 7.5 |
重要
Network |
日本電気 Apache Software Foundation |
CONNEXIVE PF SpoolServer/ReportFiling WitchyMail Apache HTTP Server WebOTX Application Server ActSecure ポータル |
Apache HTTP Server におけるランダムメモリ領域を読み取られる脆弱性 |
CWE-665
Improper Initialization |
CVE-2022-22719 | 2023-12-12 16:45 | 2022-03-14 | Show | GitHub Exploit DB Packet Storm |
| 653 | 9.1 |
緊急
Network |
IBM | IBM WebSphere Application Server | IBM の IBM WebSphere Application Server における XML 外部エンティティの脆弱性 |
CWE-611
XXE |
CVE-2023-27554 | 2023-12-8 16:37 | 2023-05-10 | Show | GitHub Exploit DB Packet Storm |
| 654 | 9.1 |
緊急
Network |
SAP | netweaver application server for java | SAP の netweaver application server for java における重要な機能に対する認証の欠如に関する脆弱性 |
CWE-306
Missing Authentication for Critical Function |
CVE-2023-30744 | 2023-12-7 15:48 | 2023-05-9 | Show | GitHub Exploit DB Packet Storm |
| 655 | 5.3 |
警告
Network |
IBM | IBM WebSphere Application Server | IBM の IBM WebSphere Application Server における証明書検証に関する脆弱性 |
CWE-295
Improper Certificate Validation |
CVE-2022-39161 | 2023-12-7 14:36 | 2022-09-1 | Show | GitHub Exploit DB Packet Storm |
| 656 | 9.8 |
緊急
Network |
netentsec | application security gateway | netentsec の application security gateway における SQL インジェクションの脆弱性 |
CWE-89
SQL Injection |
CVE-2023-30242 | 2023-12-7 10:28 | 2023-05-5 | Show | GitHub Exploit DB Packet Storm |
| 657 | 7.5 |
重要
Network |
netentsec | application security gateway | netentsec の application security gateway における SQL インジェクションの脆弱性 |
CWE-89
SQL Injection |
CVE-2023-30243 | 2023-12-7 10:28 | 2023-05-5 | Show | GitHub Exploit DB Packet Storm |
| 658 | 7.5 |
重要
Network |
IBM |
z/Transaction Processing Facility Java IBM InfoSphere Information Server IBM WebSphere Application Server |
複数の IBM 製品における脆弱性 |
CWE-noinfo
noinfo |
CVE-2023-30441 | 2023-12-6 11:45 | 2023-04-20 | Show | GitHub Exploit DB Packet Storm |
| 659 | 6.1 |
警告
Network |
Zoho Corporation | manageengine applications manager | Zoho Corporation の manageengine applications manager におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-29442 | 2023-12-6 10:47 | 2023-04-26 | Show | GitHub Exploit DB Packet Storm |
| 660 | 6.1 |
警告
Network |
IBM | IBM WebSphere Application Server | IBM の IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-24966 | 2023-12-5 15:01 | 2023-04-26 | Show | GitHub Exploit DB Packet Storm |
| 661 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Advanced Firewall Manager (AFM) BIG-IP Access Policy Manager (APM) BIG-IP Application Acceleration Manager (AAM) BIG-IP&nbs… |
複数の F5 Networks 製品における有効期限後のメモリの解放の欠如に関する脆弱性 |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2023-29163 | 2023-12-5 13:44 | 2023-05-3 | Show | GitHub Exploit DB Packet Storm |
| 662 | 5.3 |
警告
Network |
F5 Networks |
BIG-IP Edge Gateway BIG-IP WebSafe BIG-IP Application Security Manager (ASM) BIG-IP Local Traffic Manager (LTM) BIG-IP SSL … |
複数の F5 Networks 製品におけるリソースの枯渇に関する脆弱性 |
CWE-400
Uncontrolled Resource Consumption |
CVE-2023-24594 | 2023-12-5 12:08 | 2023-05-3 | Show | GitHub Exploit DB Packet Storm |
| 663 | 6.1 |
警告
Network |
F5 Networks |
BIG-IP Edge Gateway BIG-IP WebSafe BIG-IP Application Security Manager (ASM) BIG-IP Local Traffic Manager (LTM) BIG-IP SSL … |
複数の F5 Networks 製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-27378 | 2023-12-5 12:07 | 2023-05-3 | Show | GitHub Exploit DB Packet Storm |
| 664 | 4.3 |
警告
Network |
F5 Networks |
BIG-IP Edge Gateway BIG-IP WebSafe BIG-IP Application Security Manager (ASM) BIG-IP Local Traffic Manager (LTM) BIG-IP SSL … |
複数の F5 Networks 製品におけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2023-28406 | 2023-12-5 12:06 | 2023-05-3 | Show | GitHub Exploit DB Packet Storm |
| 665 | 8.7 |
重要
Network |
F5 Networks |
BIG-IP Application Acceleration Manager (AAM) BIG-IP Application Security Manager (ASM) BIG-IP Access Policy Manager (APM) BIG-IP&… |
複数の F5 Networks 製品におけるコマンドインジェクションの脆弱性 |
CWE-77
Command Injection |
CVE-2022-41800 | 2023-11-28 16:02 | 2022-11-10 | Show | GitHub Exploit DB Packet Storm |
| 666 | 8.8 |
重要
Network |
F5 Networks |
BIG-IP Domain Name System (DNS) BIG-IP Application Security Manager (ASM) BIG-IP Fraud Protection Service (FPS) BIG-IP Access… |
複数の F5 Networks 製品におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
Origin Validation Error |
CVE-2022-41622 | 2023-11-28 15:00 | 2022-11-16 | Show | GitHub Exploit DB Packet Storm |
| 667 | 6.1 |
警告
Network |
SAP | netweaver application server java | SAP の netweaver application server java におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2022-41262 | 2023-11-28 12:12 | 2022-12-12 | Show | GitHub Exploit DB Packet Storm |
| 668 | 9.8 |
緊急
Network |
シトリックス・システムズ |
Citrix Application Delivery Controller ファームウェア Citrix Gateway ファームウェア |
シトリックス・システムズの Citrix Application Delivery Controller ファームウェアおよび Citrix Gateway ファームウェアにおける脆弱性 |
CWE-Other
Other |
CVE-2022-27518 | 2023-11-28 12:08 | 2022-12-13 | Show | GitHub Exploit DB Packet Storm |
| 669 | 8.8 |
重要
Network |
mobatime | mobatime web application | mobatime の mobatime web application における危険なタイプのファイルの無制限アップロードに関する脆弱性 |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2023-3032 | 2023-11-27 17:10 | 2023-06-2 | Show | GitHub Exploit DB Packet Storm |
| 670 | 8.8 |
重要
Network |
mobatime | mobatime web application | mobatime の mobatime web application における不正な認証に関する脆弱性 |
CWE-863
Incorrect Authorization |
CVE-2023-3033 | 2023-11-27 17:10 | 2023-06-2 | Show | GitHub Exploit DB Packet Storm |
| 671 | 5.5 |
警告
Local |
IBM | IBM Maximo Application Suite | IBM の IBM Maximo Application Suite における認証情報の不十分な保護に関する脆弱性 |
CWE-522
Insufficiently Protected Credentials |
CVE-2022-41732 | 2023-11-24 13:47 | 2022-10-20 | Show | GitHub Exploit DB Packet Storm |
| 672 | 8.8 |
重要
Network |
シスコシステムズ | Cisco BroadWorks CommPilot Application Software | シスコシステムズの Cisco BroadWorks CommPilot Application Software におけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2022-20958 | 2023-11-21 11:20 | 2022-11-2 | Show | GitHub Exploit DB Packet Storm |
| 673 | 5.9 |
警告
Network |
IBM | IBM WebSphere Application Server | IBM の IBM WebSphere Application Server におけるスプーフィングによる認証回避に関する脆弱性 |
CWE-290
Authentication Bypass by Spoofing |
CVE-2022-38712 | 2023-11-21 10:12 | 2022-10-17 | Show | GitHub Exploit DB Packet Storm |
| 674 | 3.7 |
低
Network |
F5 Networks |
BIG-IP Advanced Firewall Manager (AFM) BIG-IP Analytics BIG-IP Application Acceleration Manager (AAM) BIG-IP Access Policy Manager… |
複数の F5 Networks 製品における重要な情報の平文での送信に関する脆弱性 |
CWE-319
Cleartext Transmission of Sensitive Information |
CVE-2022-41983 | 2023-11-20 16:52 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 675 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Application Acceleration Manager (AAM) BIG-IP Advanced Firewall Manager (AFM) BIG-IP Analytics BIG-IP Access Policy Manager… |
複数の F5 Networks 製品における有効期限後のメモリの解放の欠如に関する脆弱性 |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2022-41832 | 2023-11-20 15:08 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 676 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Advanced Firewall Manager (AFM) BIG-IP Analytics BIG-IP Application Security Manager (ASM) BIG-IP Access Policy Manager&nbs… |
複数の F5 Networks 製品における計算の誤りに関する脆弱性 |
CWE-682
Incorrect Calculation |
CVE-2022-36795 | 2023-11-20 14:57 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 677 | 6.5 |
警告
Network |
F5 Networks |
BIG-IP Advanced Firewall Manager (AFM) BIG-IP Application Acceleration Manager (AAM) BIG-IP Analytics BIG-IP Access Policy Manager… |
複数の F5 Networks 製品におけるリソースの枯渇に関する脆弱性 |
CWE-400
Uncontrolled Resource Consumption |
CVE-2022-41770 | 2023-11-20 13:44 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 678 | 7.2 |
重要
Network |
F5 Networks |
BIG-IP Advanced Web Application Firewall (WAF) BIG-IP Application Security Manager (ASM) |
F5 Networks の BIG-IP Advanced Web Application Firewall (WAF) および BIG-IP Application Security Manager (ASM) におけるコマンドインジェクションの脆弱性 |
CWE-77
Command Injection |
CVE-2022-41617 | 2023-11-20 12:21 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 679 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Local Traffic Manager (LTM) BIG-IP Application Security Manager (ASM) BIG-IP Access Policy Manager (APM) BIG-IP Fraud&… |
複数の F5 Networks 製品におけるリソースの枯渇に関する脆弱性 |
CWE-400
Uncontrolled Resource Consumption |
CVE-2022-41833 | 2023-11-20 12:09 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 680 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Access Policy Manager (APM) BIG-IP Application Acceleration Manager (AAM) BIG-IP Advanced Firewall Manager (AFM) BIG-IP&nbs… |
複数の F5 Networks 製品における有効期限後のメモリの解放の欠如に関する脆弱性 |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2022-41624 | 2023-11-20 11:53 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 681 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Application Security Manager (ASM) BIG-IP Advanced Web Application Firewall (WAF) |
F5 Networks の BIG-IP Advanced Web Application Firewall (WAF) および BIG-IP Application Security Manager (ASM) における無効なポインタや参照の解放に関する脆弱性 |
CWE-763
Release of Invalid Pointer or Reference |
CVE-2022-41691 | 2023-11-20 11:50 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 682 | 4.9 |
警告
Network |
F5 Networks |
BIG-IP Analytics BIG-IP Advanced Firewall Manager (AFM) BIG-IP Application Security Manager (ASM) BIG-IP Access Policy Manager&nbs… |
複数の F5 Networks 製品における入力確認に関する脆弱性 |
CWE-20
Improper Input Validation |
CVE-2022-41694 | 2023-11-20 11:46 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 683 | 7.5 |
重要
Network |
F5 Networks |
BIG-IP Application Security Manager (ASM) BIG-IP Advanced Web Application Firewall (WAF) |
F5 Networks の BIG-IP Advanced Web Application Firewall (WAF) および BIG-IP Application Security Manager (ASM) における脆弱性 |
CWE-noinfo
noinfo |
CVE-2022-41836 | 2023-11-20 11:42 | 2022-10-19 | Show | GitHub Exploit DB Packet Storm |
| 684 | 6.1 |
警告
Network |
SAP | SAP NetWeaver | SAP の SAP NetWeaver および SAP Netweaver Application Server ABAP におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-27499 | 2023-11-17 15:52 | 2023-04-10 | Show | GitHub Exploit DB Packet Storm |
| 685 | 5.4 |
警告
Network |
IBM | IBM TRIRIGA Application Platform | IBM の IBM TRIRIGA Application Platform におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2022-43914 | 2023-11-17 15:34 | 2022-10-26 | Show | GitHub Exploit DB Packet Storm |
| 686 | 7.1 |
重要
Network |
IBM | IBM TRIRIGA Application Platform | IBM の IBM TRIRIGA Application Platform における XML 外部エンティティの脆弱性 |
CWE-611
XXE |
CVE-2023-27876 | 2023-11-17 15:29 | 2023-04-5 | Show | GitHub Exploit DB Packet Storm |
| 687 | 4.6 |
警告
Network |
SAP |
S4CORE application interface framework ABAP platform SAP Basis |
複数の SAP 製品における CSV ファイル内の数式要素の中和に関する脆弱性 |
CWE-1236
Improper Neutralization of Formula Elements in a CSV File |
CVE-2023-29109 | 2023-11-17 15:24 | 2023-04-11 | Show | GitHub Exploit DB Packet Storm |
| 688 | 5.4 |
警告
Network |
SAP | application interface | SAP の application interface におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-29112 | 2023-11-17 15:24 | 2023-04-11 | Show | GitHub Exploit DB Packet Storm |
| 689 | 5.4 |
警告
Network |
SAP |
ABAP platform SAP Basis S4CORE application interface framework |
複数の SAP 製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-29110 | 2023-11-17 14:33 | 2023-04-11 | Show | GitHub Exploit DB Packet Storm |
| 690 | 4.3 |
警告
Network |
SAP | application interface framework | SAP の application interface framework における脆弱性 |
CWE-noinfo
noinfo |
CVE-2023-29111 | 2023-11-17 14:33 | 2023-04-11 | Show | GitHub Exploit DB Packet Storm |
| 691 | 6.1 |
警告
Network |
survey application system project | survey application system | survey application system project の survey application system におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-1946 | 2023-11-17 13:35 | 2023-04-7 | Show | GitHub Exploit DB Packet Storm |
| 692 | 6.5 |
警告
Network |
Zoho Corporation | manageengine applications manager | Zoho Corporation の manageengine applications manager における XML 外部エンティティの脆弱性 |
CWE-611
XXE |
CVE-2023-28340 | 2023-11-17 12:12 | 2023-04-10 | Show | GitHub Exploit DB Packet Storm |
| 693 | 6.1 |
警告
Network |
Zoho Corporation | manageengine applications manager | Zoho Corporation の manageengine applications manager におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-28341 | 2023-11-17 12:09 | 2023-04-10 | Show | GitHub Exploit DB Packet Storm |
| 694 | 6.5 |
警告
Network |
- | SAP の SAP Netweaver Application Server ABAP における脆弱性 |
CWE-noinfo
noinfo |
CVE-2023-28763 | 2023-11-17 11:26 | 2023-04-10 | Show | GitHub Exploit DB Packet Storm | |
| 695 | 5.4 |
警告
Network |
IBM | IBM WebSphere Application Server | IBM の IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-26283 | 2023-11-15 16:50 | 2023-03-21 | Show | GitHub Exploit DB Packet Storm |
| 696 | 4.3 |
警告
Network |
GitLab.org | dynamic application security testing analyzer | GitLab.org の dynamic application security testing analyzer における脆弱性 |
CWE-noinfo
noinfo |
CVE-2023-0326 | 2023-11-14 10:13 | 2023-03-27 | Show | GitHub Exploit DB Packet Storm |
| 697 | 6.1 |
警告
Network |
oretnom23 | earnings and expense tracker application | oretnom23 の earnings and expense tracker application におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2023-1688 | 2023-11-13 12:26 | 2023-03-29 | Show | GitHub Exploit DB Packet Storm |
| 698 | 7.8 |
重要
Local |
audinate | dante application library | audinate の dante application library における信頼できない検索パスに関する脆弱性 |
CWE-426
Untrusted Search Path |
CVE-2022-23748 | 2023-11-10 17:19 | 2022-11-17 | Show | GitHub Exploit DB Packet Storm |
| 699 | 8.1 |
重要
Network |
Parallels | Remote Application Server | Parallels の Remote Application Server におけるエンコードおよびエスケープに関する脆弱性 |
CWE-116
Improper Encoding or Escaping of Output |
CVE-2022-40870 | 2023-11-10 17:18 | 2022-11-23 | Show | GitHub Exploit DB Packet Storm |
| 700 | 9.1 |
緊急
Network |
generalbytes | crypto application server | generalbytes の crypto application server における危険なタイプのファイルの無制限アップロードに関する脆弱性 |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2023-28725 | 2023-11-10 11:44 | 2023-03-22 | Show | GitHub Exploit DB Packet Storm |