Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1241 6.1 警告
Network
Razorpay Razorpay Payment Button Plugin Razorpay の WordPress 用 Razorpay Payment Button Plugin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-10851 2025-01-20 15:42 2024-11-13 Show GitHub Exploit DB Packet Storm
1242 9.8 緊急
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-3315 2025-01-20 15:27 2024-04-4 Show GitHub Exploit DB Packet Storm
1243 6.1 警告
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3377 2025-01-20 15:27 2024-04-6 Show GitHub Exploit DB Packet Storm
1244 5.4 警告
Network
Argie Online courseware Argie の Online courseware におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3426 2025-01-20 15:27 2024-04-7 Show GitHub Exploit DB Packet Storm
1245 8.8 重要
Network
Ivanti connect secure Ivanti の connect secure における脆弱性 CWE-602
CWE-Other
CVE-2024-9844 2025-01-20 15:27 2024-12-10 Show GitHub Exploit DB Packet Storm
1246 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Window…
Windows CSC Service Elevation of Privilege Vulnerability CWE-122
CWE-noinfo
CVE-2025-21378 2025-01-20 15:26 2025-01-14 Show GitHub Exploit DB Packet Storm
1247 4.3 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements における脆弱性 CWE-200
CWE-noinfo
CVE-2024-8902 2025-01-20 15:16 2024-10-12 Show GitHub Exploit DB Packet Storm
1248 8.8 重要
Network
SimpleHelp Ltd SimpleHelp SimpleHelp Ltd の SimpleHelp における脆弱性 CWE-noinfo
情報不足
CVE-2024-57726 2025-01-20 15:16 2025-01-15 Show GitHub Exploit DB Packet Storm
1249 9.8 緊急
Network
Progress Software Corporation MOVEit Transfer Progress Software Corporation の MOVEit Transfer における脆弱性 CWE-287
CWE-noinfo
CVE-2024-5806 2025-01-20 15:16 2024-06-25 Show GitHub Exploit DB Packet Storm
1250 7.5 重要
Network
Couchbase, Inc. couchbase server Couchbase, Inc. の Couchbase Server における脆弱性 CWE-200
CWE-noinfo
CVE-2024-23302 2025-01-20 15:15 2024-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280451 - linux linux_kernel Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs. NVD-CWE-Other
CVE-2001-1551 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280452 - university_of_california seti_at_home Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_… NVD-CWE-Other
CVE-2001-1553 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280453 - ibm aix IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets. NVD-CWE-Other
CVE-2001-1554 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280454 - ibm aix Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. NVD-CWE-Other
CVE-2001-1557 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280455 - snort snort Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash). NVD-CWE-Other
CVE-2001-1558 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280456 - john_bovey
debian
xvt
debian_linux
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. NVD-CWE-Other
CVE-2001-1561 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280457 - apple mac_os_x Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via… NVD-CWE-Other
CVE-2001-1565 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280458 - vanessa
verge
vanessa_logger
perdition
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function. NVD-CWE-Other
CVE-2001-1566 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280459 - cmg wap_gateway CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the… NVD-CWE-Other
CVE-2001-1568 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
280460 - cmg openwave_wap_gateway Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-i… NVD-CWE-Other
CVE-2001-1569 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm