Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1151 7.8 重要
Local 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microsoft Windows 11
Microsoft Windows Server&… 		Windows Graphics コンポーネントの特権の昇格の脆弱性 CWE-122
CWE-190
CWE-noinfo
CVE-2025-21382 2025-01-21 08:49 2025-01-14 Show GitHub Exploit DB Packet Storm
1152 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Window… 		Windows upnphost.dll のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21389 2025-01-21 08:49 2025-01-14 Show GitHub Exploit DB Packet Storm
1153 8.8 重要
Network 		wpextended The Ultimate WordPress Toolkit  - WP Extended wpextended の WordPress 用 The Ultimate WordPress Toolkit - WP Extended における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-11816 2025-01-21 08:41 2024-11-26 Show GitHub Exploit DB Packet Storm
1154 5.4 警告
Network 		Jenkins プロジェクト Build Monitor View Jenkins プロジェクトの Jenkins 用 Build Monitor View におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-28156 2025-01-21 08:41 2024-03-6 Show GitHub Exploit DB Packet Storm
1155 3.3 低
Local 		Phiewer Phiewer Phiewer における信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2024-53407 2025-01-21 08:37 2024-11-20 Show GitHub Exploit DB Packet Storm
1156 8.8 重要
Network 		Ivanti connect secure Ivanti の connect secure における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-9420 2025-01-20 18:27 2024-11-12 Show GitHub Exploit DB Packet Storm
1157 7.1 重要
Local 		Ivanti secure access client Ivanti の secure access client における脆弱性 CWE-267
CWE-Other
CVE-2024-8539 2025-01-20 18:26 2024-11-12 Show GitHub Exploit DB Packet Storm
1158 5.5 警告
Local 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-20
CWE-noinfo
CVE-2024-54101 2025-01-20 18:25 2024-12-12 Show GitHub Exploit DB Packet Storm
1159 7.2 重要
Network 		instantcms instantcms instantcms における SQL インジェクションの脆弱性 CWE-20
CWE-89
CWE-89
CVE-2024-31212 2025-01-20 18:24 2024-04-4 Show GitHub Exploit DB Packet Storm
1160 9.8 緊急
Network 		StylemixThemes MasterStudy LMS StylemixThemes の WordPress 用 MasterStudy LMS における脆弱性 CWE-Other
その他 		CVE-2024-3136 2025-01-20 18:24 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279581 - lucent access_point_service_router_1500
access_point_service_router_300
access_point_service_router_600 		Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface. NVD-CWE-Other
CVE-2002-2149 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279582 - juniper netscreen_screenos Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UD… NVD-CWE-Other
CVE-2002-2150 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279583 - software602 602pro_lan_suite The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password p… NVD-CWE-Other
CVE-2002-2152 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279584 - cerulean_studios trillian Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string… NVD-CWE-Other
CVE-2002-2155 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279585 - cerulean_studios trillian Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response. NVD-CWE-Other
CVE-2002-2156 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279586 - zendocs zentrack zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message. NVD-CWE-Other
CVE-2002-2158 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279587 - kerio personal_firewall Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood. NVD-CWE-Other
CVE-2002-2161 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279588 - cerulean_studios trillian Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user account… NVD-CWE-Other
CVE-2002-2162 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279589 - killervault kvpoll KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php. NVD-CWE-Other
CVE-2002-2163 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
279590 - microsoft outlook_express Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link. NVD-CWE-Other
CVE-2002-2164 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm