Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1141 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2023-52662 2025-01-21 10:21 2023-12-4 Show GitHub Exploit DB Packet Storm
1142 2.3
Local
フォーティネット FortiManager
FortiAnalyzer-BigData
FortiAnalyzer
複数のフォーティネット製品におけるパストラバーサルの脆弱性 CWE-22
CWE-23
CVE-2024-35274 2025-01-21 10:01 2024-11-12 Show GitHub Exploit DB Packet Storm
1143 6.5 警告
Network
Jenkins プロジェクト MQ Notifier Plugin Jenkins プロジェクトの Jenkins 用 MQ Notifier Plugin における脆弱性 CWE-noinfo
情報不足
CVE-2024-28154 2025-01-21 09:59 2024-03-6 Show GitHub Exploit DB Packet Storm
1144 7.2 重要
Network
SimpleHelp Ltd SimpleHelp SimpleHelp Ltd の SimpleHelp におけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2024-57728 2025-01-21 09:51 2025-01-15 Show GitHub Exploit DB Packet Storm
1145 8.8 重要
Network
FlyCms project FlyCms sunkaifei の FlyCms におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-352
CVE-2024-22939 2025-01-21 08:55 2024-02-29 Show GitHub Exploit DB Packet Storm
1146 5.4 警告
Network
Primitiv Media PJ News Ticker Primitiv Media の WordPress 用 PJ News Ticker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-25094 2025-01-21 08:55 2024-02-29 Show GitHub Exploit DB Packet Storm
1147 5.4 警告
Network
bajorat-media PB oEmbed HTML5 Audio - with Cache Support bajorat-media の WordPress 用 PB oEmbed HTML5 Audio - with Cache Support におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-25098 2025-01-21 08:55 2024-02-29 Show GitHub Exploit DB Packet Storm
1148 8.8 重要
Network
フォーティネット FortiClient フォーティネットの Linux 用 FortiClient におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2023-45590 2025-01-21 08:49 2023-10-9 Show GitHub Exploit DB Packet Storm
1149 5.4 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge for Android (Chromium ベース) の情報漏えいの脆弱性 CWE-359
CWE-noinfo
CVE-2024-29986 2025-01-21 08:49 2024-04-18 Show GitHub Exploit DB Packet Storm
1150 7.8 重要
Local
マイクロソフト Microsoft 365 Apps
Microsoft Office
Microsoft Word のリモートでコードが実行される脆弱性 CWE-822
CWE-noinfo
CVE-2025-21363 2025-01-21 08:49 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275851 - clone2009 ebay_clone Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter. CWE-79
Cross-site Scripting
CVE-2009-2424 2009-08-21 13:00 2009-07-11 Show GitHub Exploit DB Packet Storm
275852 - nasa_goddard_space_flight_center common_data_format Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2009-2850 2009-08-21 13:00 2009-08-19 Show GitHub Exploit DB Packet Storm
275853 - ibm db2 Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memor… CWE-399
 Resource Management Errors
CVE-2009-2858 2009-08-21 13:00 2009-08-20 Show GitHub Exploit DB Packet Storm
275854 - ibm db2 Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "malicious packets." NVD-CWE-noinfo
CVE-2009-2860 2009-08-21 13:00 2009-08-20 Show GitHub Exploit DB Packet Storm
275855 - datingpro matchmaking Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) browse_ladies.php and (2) browse_men.… CWE-79
Cross-site Scripting
CVE-2009-2882 2009-08-21 13:00 2009-08-21 Show GitHub Exploit DB Packet Storm
275856 - siemens gigaset_wlan_camera Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details a… CWE-310
Cryptographic Issues
CVE-2008-6993 2009-08-21 13:00 2009-08-19 Show GitHub Exploit DB Packet Storm
275857 - xzeroscripts xzero_community_classifieds Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in… CWE-79
Cross-site Scripting
CVE-2009-2893 2009-08-21 02:30 2009-08-21 Show GitHub Exploit DB Packet Storm
275858 - cisco wvc54gc Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 all… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-4391 2009-08-20 14:21 2008-12-9 Show GitHub Exploit DB Packet Storm
275859 - viewvc viewvc ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information. CWE-200
Information Exposure
CVE-2008-1290 2009-08-20 14:14 2008-03-25 Show GitHub Exploit DB Packet Storm
275860 - viewvc viewvc ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder. CWE-200
Information Exposure
CVE-2008-1291 2009-08-20 14:14 2008-03-25 Show GitHub Exploit DB Packet Storm