Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1211 7.8 重要
Local 		マイクロソフト Microsoft Access
Microsoft 365 Apps
Microsoft Office 		Microsoft Access のリモート コードが実行される脆弱性 CWE-416
CWE-noinfo
CVE-2024-49142 2025-01-20 17:01 2024-12-10 Show GitHub Exploit DB Packet Storm
1212 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-57881 2025-01-20 16:59 2024-12-18 Show GitHub Exploit DB Packet Storm
1213 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2024-56615 2025-01-20 16:58 2024-11-25 Show GitHub Exploit DB Packet Storm
1214 7.1 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2024-56627 2025-01-20 16:58 2024-12-1 Show GitHub Exploit DB Packet Storm
1215 5.4 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) のなりすましの脆弱性 CWE-451
CWE-noinfo
CVE-2024-30055 2025-01-20 16:57 2024-05-10 Show GitHub Exploit DB Packet Storm
1216 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2024-56626 2025-01-20 16:57 2024-12-1 Show GitHub Exploit DB Packet Storm
1217 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2024-56598 2025-01-20 16:54 2024-10-29 Show GitHub Exploit DB Packet Storm
1218 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-54680 2025-01-20 16:52 2024-12-19 Show GitHub Exploit DB Packet Storm
1219 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-54460 2025-01-20 16:52 2024-12-12 Show GitHub Exploit DB Packet Storm
1220 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-54683 2025-01-20 16:52 2024-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276211 - apple mac_os_x
mac_os_x_server
java_1.4
java_1.5
java_1.6 		Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-2205 2009-09-19 14:30 2009-09-10 Show GitHub Exploit DB Packet Storm
276212 - intertwingly planet
planet_venus 		Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed. CWE-79
Cross-site Scripting 		CVE-2009-2937 2009-09-18 19:30 2009-09-18 Show GitHub Exploit DB Packet Storm
276213 - ohwada xf-section Cross-site scripting (XSS) vulnerability in the Happy Linux XF-Section module 1.12a for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2009-3240 2009-09-18 19:30 2009-09-18 Show GitHub Exploit DB Packet Storm
276214 - punbb punbb Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced lo… CWE-352
 Origin Validation Error 		CVE-2008-7241 2009-09-18 13:00 2009-09-18 Show GitHub Exploit DB Packet Storm
276215 - cameron_morland changetrack changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack. CWE-78
OS Command  		CVE-2009-3233 2009-09-17 19:30 2009-09-17 Show GitHub Exploit DB Packet Storm
276216 - sun opensolaris
solaris 		Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a Cassini GigaSwift Ethernet Adapter (aka CE) inter… NVD-CWE-noinfo
CVE-2009-2136 2009-09-17 14:26 2009-06-20 Show GitHub Exploit DB Packet Storm
276217 - sun opensolaris
solaris 		Per http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1 "Note 2: A system is only vulnerable to this issue if it is using a GigaSwift Ethernet Adapter (CE) interface (ce(7D)) which h… NVD-CWE-noinfo
CVE-2009-2136 2009-09-17 14:26 2009-06-20 Show GitHub Exploit DB Packet Storm
276218 - almondsoft almond_classifieds Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web scr… CWE-79
Cross-site Scripting 		CVE-2009-3225 2009-09-17 13:00 2009-09-17 Show GitHub Exploit DB Packet Storm
276219 - almondsoft affiliate_network_classifieds
almond_classifieds 		SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the rep… CWE-89
SQL Injection 		CVE-2009-3226 2009-09-17 13:00 2009-09-17 Show GitHub Exploit DB Packet Storm
276220 - almondsoft affiliate_network_classifieds
almond_classifieds 		Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2009-3227 2009-09-17 13:00 2009-09-17 Show GitHub Exploit DB Packet Storm