Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1071 7.8 重要
Local
アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-21136 2025-01-22 11:49 2025-01-14 Show GitHub Exploit DB Packet Storm
1072 7.8 重要
Local
アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-21138 2025-01-22 11:49 2025-01-14 Show GitHub Exploit DB Packet Storm
1073 7.8 重要
Local
アドビシステムズ Adobe Illustrator アドビの Ipad Os 用 Adobe Illustrator における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2025-21133 2025-01-22 11:34 2025-01-14 Show GitHub Exploit DB Packet Storm
1074 5.3 警告
Network
ヒューレット・パッカード
シスコシステムズ
Digi International Inc. 
Cisco NX-OS
X3220NR ファームウェア
Saros
複数の IP 標準で IP カプセル化を実装する製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2020-10136 2025-01-22 11:18 2020-06-2 Show GitHub Exploit DB Packet Storm
1075 8.8 重要
Network
RadiusTheme Classified Listing - Classified Ads & Business Directory Plugin RadiusTheme の WordPress 用 Classified Listing - Classified ads & Business Directory Plugin におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-1315 2025-01-22 11:16 2024-04-9 Show GitHub Exploit DB Packet Storm
1076 3.3
Local
Termius Corporation Termius Termius Corporation の Termius における信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス
CVE-2024-55503 2025-01-22 11:05 2024-12-6 Show GitHub Exploit DB Packet Storm
1077 5.4 警告
Network
WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3818 2025-01-22 10:37 2024-04-19 Show GitHub Exploit DB Packet Storm
1078 6.5 警告
Network
Mattermost, Inc. Mattermost Mobile Mattermost, Inc. の Mattermost Mobile における脆弱性 CWE-400
CWE-noinfo
CVE-2024-3872 2025-01-22 10:37 2024-04-16 Show GitHub Exploit DB Packet Storm
1079 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. ac500 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の ac500 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3906 2025-01-22 10:37 2024-04-17 Show GitHub Exploit DB Packet Storm
1080 9.8 緊急
Network
マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-3967 2025-01-22 10:37 2024-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274531 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console. NVD-CWE-noinfo
CVE-2009-3396 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274532 - oracle e-business_suite Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2009-3397 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274533 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console. NVD-CWE-noinfo
CVE-2009-3399 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274534 - oracle e-business_suite Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality and integrity … NVD-CWE-noinfo
CVE-2009-3400 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274535 - oracle e-business_suite Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows local users to affect confidentiality via unknown vecto… NVD-CWE-noinfo
CVE-2009-3401 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274536 - oracle e-business_suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality via unkno… NVD-CWE-noinfo
CVE-2009-3402 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274537 - oracle bea_product_suite Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unkno… NVD-CWE-noinfo
CVE-2009-3403 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274538 - oracle bea_product_suite Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html "Sun MicroSystems released a Security Alert in August 2009 to address multiple vulnerabilities affectin… NVD-CWE-noinfo
CVE-2009-3403 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274539 - oracle jd_edwards_enterpriseone
peoplesoft_enterprise
Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect … NVD-CWE-noinfo
CVE-2009-3404 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm
274540 - oracle jd_edwards_enterpriseone
peoplesoft_enterprise
Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availabilit… NVD-CWE-noinfo
CVE-2009-3405 2012-10-23 12:11 2009-10-23 Show GitHub Exploit DB Packet Storm