Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1021 9.8 緊急
Network 		アバイア Avaya IP Office アバイアの Avaya IP Office における脆弱性 CWE-20
CWE-noinfo
CVE-2024-4196 2025-01-22 15:40 2024-06-25 Show GitHub Exploit DB Packet Storm
1022 9.8 緊急
Network 		BlackBerry QNX Software Development Platform BlackBerry の QNX Software Development Platform における境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2024-48856 2025-01-22 15:40 2024-10-8 Show GitHub Exploit DB Packet Storm
1023 5.4 警告
Network 		Autolab project Autolab Autolab project の Autolab における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2024-52584 2025-01-22 15:40 2024-11-18 Show GitHub Exploit DB Packet Storm
1024 7.8 重要
Local 		マイクロソフト Microsoft Office
Microsoft 365 Apps 		Microsoft Office Visio のリモートでコードが実行される脆弱性 CWE-122
CWE-843
CWE-noinfo
CVE-2025-21356 2025-01-22 15:37 2025-01-14 Show GitHub Exploit DB Packet Storm
1025 9.8 緊急
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager における XML 外部エンティティの脆弱性 CWE-611
CWE-611
CVE-2024-3486 2025-01-22 15:37 2024-05-15 Show GitHub Exploit DB Packet Storm
1026 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の F1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3876 2025-01-22 15:37 2024-04-16 Show GitHub Exploit DB Packet Storm
1027 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC8 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC8 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4065 2025-01-22 15:37 2024-04-23 Show GitHub Exploit DB Packet Storm
1028 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. 4g300 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の 4g300 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4169 2025-01-22 15:37 2024-04-25 Show GitHub Exploit DB Packet Storm
1029 8.5 重要
Network 		cvat computer vision annotation tool cvat の computer vision annotation tool におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
CWE-918
CVE-2024-37164 2025-01-22 15:37 2024-06-13 Show GitHub Exploit DB Packet Storm
1030 5.4 警告
Network 		exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2750 2025-01-22 15:31 2024-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275561 - apple mac_os_x
mac_os_x_server 		The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive inf… CWE-20
 Improper Input Validation  		CVE-2009-2835 2009-11-17 16:03 2009-11-11 Show GitHub Exploit DB Packet Storm
275562 - apple mac_os_x
mac_os_x_server 		Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an… CWE-362
Race Condition 		CVE-2009-2836 2009-11-17 16:03 2009-11-11 Show GitHub Exploit DB Packet Storm
275563 - apple mac_os_x
mac_os_x_server 		Per: "This issue does not affect systems prior to Mac OS X v.10.6." "A user may log in to any account without supplying a password" CWE-362
Race Condition 		CVE-2009-2836 2009-11-17 16:03 2009-11-11 Show GitHub Exploit DB Packet Storm
275564 - apple mac_os_x Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document that … CWE-189
Numeric Errors 		CVE-2009-2838 2009-11-17 16:03 2009-11-11 Show GitHub Exploit DB Packet Storm
275565 - apple mac_os_x
mac_os_x_server 		Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges via unspecified vect… NVD-CWE-Other
CVE-2009-2840 2009-11-17 16:03 2009-11-11 Show GitHub Exploit DB Packet Storm
275566 - apple mac_os_x
mac_os_x_server 		Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript … CWE-310
Cryptographic Issues 		CVE-2009-2808 2009-11-17 16:02 2009-11-11 Show GitHub Exploit DB Packet Storm
275567 - apple mac_os_x
mac_os_x_server 		Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary co… NVD-CWE-Other
CVE-2009-2810 2009-11-17 16:02 2009-11-11 Show GitHub Exploit DB Packet Storm
275568 - apple mac_os_x
mac_os_x_server 		Per: http://support.apple.com/kb/HT3937 "This issue does not affect systems prior to Mac OS X v10.6" NVD-CWE-Other
CVE-2009-2810 2009-11-17 16:02 2009-11-11 Show GitHub Exploit DB Packet Storm
275569 - apple mac_os_x
mac_os_x_server 		Per: http://support.apple.com/kb/HT3937 * Help Viewer CVE-ID: CVE-2009-2808 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 and v10.6.1, Mac… CWE-310
Cryptographic Issues 		CVE-2009-2808 2009-11-17 16:02 2009-11-11 Show GitHub Exploit DB Packet Storm
275570 - apple mac_os_x_server Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-2818 2009-11-17 16:02 2009-11-11 Show GitHub Exploit DB Packet Storm