Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 5.5 警告
Local 		F5 Networks F5OS-C
F5OS-A 		F5 Networks の F5OS-A および F5OS-C におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CVE-2024-23607 2025-01-27 13:46 2024-02-14 Show GitHub Exploit DB Packet Storm
2 4.9 警告
Network 		F5 Networks NGINX Agent
NGINX Instance Manager 		F5 Networks の NGINX Agent および NGINX Instance Manager におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CVE-2024-7634 2025-01-27 13:46 2024-08-23 Show GitHub Exploit DB Packet Storm
3 - - 富士電機 Alpha5 SMART 富士電機製 ALPHA5 series Loader におけるスタックベースのバッファオーバーフローの脆弱性 Update CWE-121
スタックオーバーフロー 		CVE-2024-34579 2025-01-27 13:39 2025-01-17 Show GitHub Exploit DB Packet Storm
4 8.8 重要
Network 		aipower aipower WordPress 用 aipower における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-13361 2025-01-27 13:34 2025-01-22 Show GitHub Exploit DB Packet Storm
5 7.5 重要
Network 		Open5GS Open5GS Open5GS における到達可能なアサーションに関する脆弱性 New CWE-617
CWE-617
CVE-2024-24428 2025-01-27 13:34 2024-01-25 Show GitHub Exploit DB Packet Storm
6 7.5 重要
Network 		Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
CWE-476
CVE-2024-2551 2025-01-27 13:34 2024-11-14 Show GitHub Exploit DB Packet Storm
7 6.5 警告
Network 		Timothee Boussus Your Spotify Timothee Boussus の Your Spotify における脆弱性 New CWE-200
CWE-noinfo
CVE-2024-28193 2025-01-27 13:34 2024-03-13 Show GitHub Exploit DB Packet Storm
8 9.8 緊急
Network 		Sapplica Sentrifugo Sapplica の Sentrifugo における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-29870 2025-01-27 13:34 2024-03-21 Show GitHub Exploit DB Packet Storm
9 9.8 緊急
Network 		Sapplica Sentrifugo Sapplica の Sentrifugo における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-29874 2025-01-27 13:34 2024-03-21 Show GitHub Exploit DB Packet Storm
10 6.1 警告
Network 		Sapplica Sentrifugo Sapplica の Sentrifugo におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-29879 2025-01-27 13:34 2024-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274761 - robo-ftp robo-ftp Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service and possibly execute arbitrary code via unspecified FTP server responses. NOTE… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-4103 2009-11-30 14:00 2009-11-29 Show GitHub Exploit DB Packet Storm
274762 - dotnetnuke dotnetnuke The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to … CWE-200
Information Exposure 		CVE-2009-4109 2009-11-30 14:00 2009-11-29 Show GitHub Exploit DB Packet Storm
274763 - gforge gforge Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter. CWE-79
Cross-site Scripting 		CVE-2009-3303 2009-11-25 02:30 2009-11-25 Show GitHub Exploit DB Packet Storm
274764 - gforge gforge Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2009-4069 2009-11-25 02:30 2009-11-25 Show GitHub Exploit DB Packet Storm
274765 - gforge gforge SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors. CWE-89
SQL Injection 		CVE-2009-4070 2009-11-25 02:30 2009-11-25 Show GitHub Exploit DB Packet Storm
274766 - hp openview_network_node_manager The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Er… NVD-CWE-Other
CVE-2009-3840 2009-11-24 16:04 2009-11-19 Show GitHub Exploit DB Packet Storm
274767 - hp discovery\&dependency_mapping_inventory Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2009-3841 2009-11-24 16:04 2009-11-18 Show GitHub Exploit DB Packet Storm
274768 - christos_zoulas file Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buff… CWE-189
Numeric Errors 		CVE-2009-3930 2009-11-24 16:04 2009-11-11 Show GitHub Exploit DB Packet Storm
274769 - jos_de_ruijter superseriousstats SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "i… CWE-89
SQL Injection 		CVE-2009-3961 2009-11-24 16:04 2009-11-18 Show GitHub Exploit DB Packet Storm
274770 - strongswan strongswan The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which a… CWE-310
Cryptographic Issues 		CVE-2009-2661 2009-11-24 16:02 2009-08-5 Show GitHub Exploit DB Packet Storm