Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1151 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2023-52662 2025-01-21 10:21 2023-12-4 Show GitHub Exploit DB Packet Storm
1152 2.3 低
Local 		フォーティネット FortiManager
FortiAnalyzer-BigData
FortiAnalyzer 		複数のフォーティネット製品におけるパストラバーサルの脆弱性 CWE-22
CWE-23
CVE-2024-35274 2025-01-21 10:01 2024-11-12 Show GitHub Exploit DB Packet Storm
1153 6.5 警告
Network 		Jenkins プロジェクト MQ Notifier Plugin Jenkins プロジェクトの Jenkins 用 MQ Notifier Plugin における脆弱性 CWE-noinfo
情報不足 		CVE-2024-28154 2025-01-21 09:59 2024-03-6 Show GitHub Exploit DB Packet Storm
1154 7.2 重要
Network 		SimpleHelp Ltd SimpleHelp SimpleHelp Ltd の SimpleHelp におけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2024-57728 2025-01-21 09:51 2025-01-15 Show GitHub Exploit DB Packet Storm
1155 8.8 重要
Network 		FlyCms project FlyCms sunkaifei の FlyCms におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-352
CVE-2024-22939 2025-01-21 08:55 2024-02-29 Show GitHub Exploit DB Packet Storm
1156 5.4 警告
Network 		Primitiv Media PJ News Ticker Primitiv Media の WordPress 用 PJ News Ticker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25094 2025-01-21 08:55 2024-02-29 Show GitHub Exploit DB Packet Storm
1157 5.4 警告
Network 		bajorat-media PB oEmbed HTML5 Audio - with Cache Support bajorat-media の WordPress 用 PB oEmbed HTML5 Audio - with Cache Support におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25098 2025-01-21 08:55 2024-02-29 Show GitHub Exploit DB Packet Storm
1158 8.8 重要
Network 		フォーティネット FortiClient フォーティネットの Linux 用 FortiClient におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2023-45590 2025-01-21 08:49 2023-10-9 Show GitHub Exploit DB Packet Storm
1159 5.4 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge for Android (Chromium ベース) の情報漏えいの脆弱性 CWE-359
CWE-noinfo
CVE-2024-29986 2025-01-21 08:49 2024-04-18 Show GitHub Exploit DB Packet Storm
1160 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office 		Microsoft Word のリモートでコードが実行される脆弱性 CWE-822
CWE-noinfo
CVE-2025-21363 2025-01-21 08:49 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274591 - freebsd
mandrakesoft 		freebsd
mandrake_linux 		xsoldier program allows local users to gain root access via a long argument. NVD-CWE-Other
CVE-1999-1008 2016-10-18 11:00 2000-05-17 Show GitHub Exploit DB Packet Storm
274592 - openbsd openssh An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. NVD-CWE-Other
CVE-1999-1010 2016-10-18 11:00 1999-12-14 Show GitHub Exploit DB Packet Storm
274593 - ibm aix named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file. NVD-CWE-Other
CVE-1999-1013 2016-10-18 11:00 1999-09-23 Show GitHub Exploit DB Packet Storm
274594 - seattle_lab_software emurl Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recip… NVD-CWE-Other
CVE-1999-1017 2016-10-18 11:00 1999-07-28 Show GitHub Exploit DB Packet Storm
274595 - linux linux_kernel IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragme… NVD-CWE-Other
CVE-1999-1018 2016-10-18 11:00 1999-07-27 Show GitHub Exploit DB Packet Storm
274596 - cabletron spectrum_enterprise_manager SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan ho… NVD-CWE-Other
CVE-1999-1019 2016-10-18 11:00 1999-06-23 Show GitHub Exploit DB Packet Storm
274597 - lbl tcpdump ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the pac… NVD-CWE-Other
CVE-1999-1024 2016-10-18 11:00 2001-11-28 Show GitHub Exploit DB Packet Storm
274598 - sun solaris aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file. NVD-CWE-Other
CVE-1999-1026 2016-10-18 11:00 1996-12-20 Show GitHub Exploit DB Packet Storm
274599 - symantec pcanywhere Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631. NVD-CWE-Other
CVE-1999-1028 2016-10-18 11:00 1999-05-28 Show GitHub Exploit DB Packet Storm
274600 - behold_software web_page_counter counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access… NVD-CWE-Other
CVE-1999-1030 2016-10-18 11:00 1999-05-19 Show GitHub Exploit DB Packet Storm