Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1101 5.5 警告
Local 		Linux
Debian		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2024-27059 2025-01-21 15:13 2024-03-2 Show GitHub Exploit DB Packet Storm
1102 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2022-48663 2025-01-21 15:09 2022-09-20 Show GitHub Exploit DB Packet Storm
1103 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2021-47199 2025-01-21 15:07 2021-11-16 Show GitHub Exploit DB Packet Storm
1104 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office
Microsoft Access 		Microsoft Access のリモート コードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21395 2025-01-21 14:52 2025-01-14 Show GitHub Exploit DB Packet Storm
1105 7.8 重要
Local 		クアルコム WSA8830 ファームウェア
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB
 BB) ファームウェア
sc8380xp ファームウェア
WCD9385 ファームウェア
fastconnect … 		複数のクアルコム製品における脆弱性 CWE-284
CWE-Other
CVE-2024-23360 2025-01-21 14:42 2024-06-3 Show GitHub Exploit DB Packet Storm
1106 6.3 警告
Network 		マイクロソフト Microsoft SharePoint Enterprise Server
Microsoft SharePoint Server 		Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
CWE-noinfo
CVE-2025-21393 2025-01-21 14:30 2025-01-14 Show GitHub Exploit DB Packet Storm
1107 5.5 警告
Network 		Alex Kirk Friends Alex Kirk の Friends におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-1978 2025-01-21 14:22 2024-02-29 Show GitHub Exploit DB Packet Storm
1108 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office 		Microsoft Office のリモート コードが実行される脆弱性 CWE-426
CWE-noinfo
CVE-2025-21365 2025-01-21 14:21 2025-01-14 Show GitHub Exploit DB Packet Storm
1109 4.3 警告
Network 		Really Simple Plugins Complianz - GDPR/CCPA Cookie Consent Complianz の WordPress 用 Complianz - GDPR/CCPA Cookie Consent におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-1592 2025-01-21 14:18 2024-03-2 Show GitHub Exploit DB Packet Storm
1110 5 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chrome ベース) のセキュリティ機能のバイパスの脆弱性 CWE-94
CWE-noinfo
CVE-2024-29991 2025-01-21 14:15 2024-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275621 - ibm db2 IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-3472 2009-10-14 14:26 2009-09-30 Show GitHub Exploit DB Packet Storm
275622 - strongswan strongswan charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that tr… CWE-399
 Resource Management Errors 		CVE-2009-1957 2009-10-14 14:24 2009-06-8 Show GitHub Exploit DB Packet Storm
275623 - strongswan strongswan charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE… CWE-399
 Resource Management Errors 		CVE-2009-1958 2009-10-14 14:24 2009-06-8 Show GitHub Exploit DB Packet Storm
275624 - mediawiki mediawiki Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in … CWE-79
Cross-site Scripting 		CVE-2009-0737 2009-10-14 14:22 2009-02-26 Show GitHub Exploit DB Packet Storm
275625 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2008-5249 2009-10-14 14:17 2008-12-20 Show GitHub Exploit DB Packet Storm
275626 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browse… CWE-79
Cross-site Scripting 		CVE-2008-5250 2009-10-14 14:17 2008-12-20 Show GitHub Exploit DB Packet Storm
275627 - mediawiki mediawiki Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unsp… CWE-352
 Origin Validation Error 		CVE-2008-5252 2009-10-14 14:17 2008-12-20 Show GitHub Exploit DB Packet Storm
275628 - navision financials_server Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209, when the kernel is built with the COMPAT_FREEBSD or COMPAT_… NVD-CWE-Other
CVE-2007-1273 2009-10-14 13:56 2007-03-11 Show GitHub Exploit DB Packet Storm
275629 - vmware server Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges. NVD-CWE-noinfo
CVE-2007-5619 2009-10-14 13:00 2007-10-22 Show GitHub Exploit DB Packet Storm
275630 - apple mac_os_x Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with esca… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-0970 2009-10-14 13:00 2005-05-2 Show GitHub Exploit DB Packet Storm