Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1101 5.5 警告
Local 		Linux
Debian		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2024-27059 2025-01-21 15:13 2024-03-2 Show GitHub Exploit DB Packet Storm
1102 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2022-48663 2025-01-21 15:09 2022-09-20 Show GitHub Exploit DB Packet Storm
1103 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2021-47199 2025-01-21 15:07 2021-11-16 Show GitHub Exploit DB Packet Storm
1104 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office
Microsoft Access 		Microsoft Access のリモート コードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21395 2025-01-21 14:52 2025-01-14 Show GitHub Exploit DB Packet Storm
1105 7.8 重要
Local 		クアルコム WSA8830 ファームウェア
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB
 BB) ファームウェア
sc8380xp ファームウェア
WCD9385 ファームウェア
fastconnect … 		複数のクアルコム製品における脆弱性 CWE-284
CWE-Other
CVE-2024-23360 2025-01-21 14:42 2024-06-3 Show GitHub Exploit DB Packet Storm
1106 6.3 警告
Network 		マイクロソフト Microsoft SharePoint Enterprise Server
Microsoft SharePoint Server 		Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
CWE-noinfo
CVE-2025-21393 2025-01-21 14:30 2025-01-14 Show GitHub Exploit DB Packet Storm
1107 5.5 警告
Network 		Alex Kirk Friends Alex Kirk の Friends におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-1978 2025-01-21 14:22 2024-02-29 Show GitHub Exploit DB Packet Storm
1108 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office 		Microsoft Office のリモート コードが実行される脆弱性 CWE-426
CWE-noinfo
CVE-2025-21365 2025-01-21 14:21 2025-01-14 Show GitHub Exploit DB Packet Storm
1109 4.3 警告
Network 		Really Simple Plugins Complianz - GDPR/CCPA Cookie Consent Complianz の WordPress 用 Complianz - GDPR/CCPA Cookie Consent におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-1592 2025-01-21 14:18 2024-03-2 Show GitHub Exploit DB Packet Storm
1110 5 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chrome ベース) のセキュリティ機能のバイパスの脆弱性 CWE-94
CWE-noinfo
CVE-2024-29991 2025-01-21 14:15 2024-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275851 - cisco wvc54gc Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 all… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-4391 2009-08-20 14:21 2008-12-9 Show GitHub Exploit DB Packet Storm
275852 - viewvc viewvc ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information. CWE-200
Information Exposure 		CVE-2008-1290 2009-08-20 14:14 2008-03-25 Show GitHub Exploit DB Packet Storm
275853 - viewvc viewvc ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder. CWE-200
Information Exposure 		CVE-2008-1291 2009-08-20 14:14 2008-03-25 Show GitHub Exploit DB Packet Storm
275854 - viewvc viewvc ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames … CWE-200
Information Exposure 		CVE-2008-1292 2009-08-20 14:14 2008-03-25 Show GitHub Exploit DB Packet Storm
275855 - shoppingtree candypress_store Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idcust parameter to (a) ajax_getTi… CWE-89
SQL Injection 		CVE-2008-0738 2009-08-20 14:13 2008-02-13 Show GitHub Exploit DB Packet Storm
275856 - shoppingtree candypress_store SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccoun… CWE-89
SQL Injection 		CVE-2008-0739 2009-08-20 14:13 2008-02-13 Show GitHub Exploit DB Packet Storm
275857 - ibm db2 IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-2859 2009-08-20 13:00 2009-08-20 Show GitHub Exploit DB Packet Storm
275858 - mybb mybb Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hijack the authentication of moderators or administrators for requests that delete … CWE-352
 Origin Validation Error 		CVE-2008-0788 2009-08-20 13:00 2008-02-15 Show GitHub Exploit DB Packet Storm
275859 - ibm tklm Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager (TKLM) 1.0 has unknown impact and attack vectors, related to a "password security vulnerability." NVD-CWE-noinfo
CVE-2009-2667 2009-08-19 14:29 2009-08-6 Show GitHub Exploit DB Packet Storm
275860 - apple safari Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone vi… CWE-20
 Improper Input Validation  		CVE-2009-0137 2009-08-19 14:25 2009-02-13 Show GitHub Exploit DB Packet Storm