Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1251 5.4 警告
Network 		Contao contao Contao におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-28190 2025-01-20 15:15 2024-04-9 Show GitHub Exploit DB Packet Storm
1252 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Window… 		Windows CSC サービスの情報漏えいの脆弱性 CWE-125
CWE-125
CVE-2025-21374 2025-01-20 15:15 2025-01-14 Show GitHub Exploit DB Packet Storm
1253 6.5 警告
Network 		Brizy brizy Brizy の WordPress 用 brizy におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-1165 2025-01-20 15:14 2024-02-26 Show GitHub Exploit DB Packet Storm
1254 5.4 警告
Network 		Brizy brizy Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1291 2025-01-20 15:14 2024-03-13 Show GitHub Exploit DB Packet Storm
1255 5.4 警告
Network 		Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1323 2025-01-20 15:14 2024-02-27 Show GitHub Exploit DB Packet Storm
1256 4.3 警告
Network 		zestard admin side data storage for contact form 7 zestard の WordPress 用 admin side data storage for contact form 7 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-1777 2025-01-20 15:14 2024-02-23 Show GitHub Exploit DB Packet Storm
1257 9.1 緊急
Network 		WPvivid Migration
 Backup
 Staging 		WPvivid の WordPress 用 Migration, Backup, Staging における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-1982 2025-01-20 15:14 2024-02-29 Show GitHub Exploit DB Packet Storm
1258 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21411 2025-01-20 15:12 2025-01-14 Show GitHub Exploit DB Packet Storm
1259 7.8 重要
Local 		マイクロソフト Microsoft Outlook
Microsoft Office 		Microsoft Outlook のリモートでコードが実行される脆弱性 CWE-641
CWE-noinfo
CVE-2025-21361 2025-01-20 15:10 2025-01-14 Show GitHub Exploit DB Packet Storm
1260 6.5 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性 CWE-200
CWE-359
CWE-noinfo
CVE-2024-29987 2025-01-20 15:06 2024-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277751 - sgi irix The handler CGI program in IRIX allows arbitrary command execution. NVD-CWE-Other
CVE-1999-0148 2008-09-9 21:33 1997-09-1 Show GitHub Exploit DB Packet Storm
277752 - microsoft
sco 		windows_2000
windows_95
windows_nt
openserver 		Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. NVD-CWE-Other
CVE-1999-0153 2008-09-9 21:33 1997-07-1 Show GitHub Exploit DB Packet Storm
277753 - cisco ios Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. NVD-CWE-Other
CVE-1999-0160 2008-09-9 21:33 1997-10-1 Show GitHub Exploit DB Packet Storm
277754 - cisco ios In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. NVD-CWE-Other
CVE-1999-0161 2008-09-9 21:33 1995-07-31 Show GitHub Exploit DB Packet Storm
277755 - sun sunos A race condition in the Solaris ps command allows an attacker to overwrite critical files. NVD-CWE-Other
CVE-1999-0164 2008-09-9 21:33 1995-08-29 Show GitHub Exploit DB Packet Storm
277756 - samba samba Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. NVD-CWE-Other
CVE-1999-0182 2008-09-9 21:33 1997-09-30 Show GitHub Exploit DB Packet Storm
277757 - sun solaris In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. NVD-CWE-Other
CVE-1999-0186 2008-09-9 21:33 1998-10-1 Show GitHub Exploit DB Packet Storm
277758 - microsoft internet_information_server IIS newdsn.exe CGI script allows remote users to overwrite files. NVD-CWE-Other
CVE-1999-0191 2008-09-9 21:33 1997-09-1 Show GitHub Exploit DB Packet Storm
277759 - webgais_development_team webgais websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). NVD-CWE-Other
CVE-1999-0196 2008-09-9 21:33 1997-07-8 Show GitHub Exploit DB Packet Storm
277760 - google google_apps The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a r… NVD-CWE-noinfo
CWE-287
Improper Authentication 		CVE-2008-3891 2008-09-6 06:44 2008-09-3 Show GitHub Exploit DB Packet Storm