Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1251	5.4	警告 Network	Contao	contao	Contao におけるクロスサイトスクリプティングの脆弱性	CWE-79 CWE-79	CVE-2024-28190	2025-01-20 15:15	2024-04-9	Show	GitHub Exploit DB Packet Storm

1252	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Window…	Windows CSC サービスの情報漏えいの脆弱性	CWE-125 CWE-125	CVE-2025-21374	2025-01-20 15:15	2025-01-14	Show	GitHub Exploit DB Packet Storm

1253	6.5	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-1165	2025-01-20 15:14	2024-02-26	Show	GitHub Exploit DB Packet Storm

1254	5.4	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1291	2025-01-20 15:14	2024-03-13	Show	GitHub Exploit DB Packet Storm

1255	5.4	警告 Network	Themeisle	Orbit Fox	ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1323	2025-01-20 15:14	2024-02-27	Show	GitHub Exploit DB Packet Storm

1256	4.3	警告 Network	zestard	admin side data storage for contact form 7	zestard の WordPress 用 admin side data storage for contact form 7 におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-1777	2025-01-20 15:14	2024-02-23	Show	GitHub Exploit DB Packet Storm

1257	9.1	緊急 Network	WPvivid	Migration Backup Staging	WPvivid の WordPress 用 Migration, Backup, Staging における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2024-1982	2025-01-20 15:14	2024-02-29	Show	GitHub Exploit DB Packet Storm

1258	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Window…	Windows テレフォニーサービスのリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2025-21411	2025-01-20 15:12	2025-01-14	Show	GitHub Exploit DB Packet Storm

1259	7.8	重要 Local	マイクロソフト	Microsoft Outlook Microsoft Office	Microsoft Outlook のリモートでコードが実行される脆弱性	CWE-641 CWE-noinfo	CVE-2025-21361	2025-01-20 15:10	2025-01-14	Show	GitHub Exploit DB Packet Storm

1260	6.5	警告 Network	Outlook.com	Microsoft Edge Chromium	Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性	CWE-200 CWE-359 CWE-noinfo	CVE-2024-29987	2025-01-20 15:06	2024-04-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279361	-	mod_access_referer	mod_access_referer	mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in A…	NVD-CWE-Other	CVE-2003-1054	2008-09-6 05:35	2003-04-16	Show	GitHub Exploit DB Packet Storm

279362	-	fourelle_venturi_wireless	venturi_client	Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abuse…	NVD-CWE-Other	CVE-2003-0316	2008-09-6 05:34	2003-06-16	Show	GitHub Exploit DB Packet Storm

279363	-	colten_edwards	bitchx	Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).	NVD-CWE-Other	CVE-2003-0322	2008-09-6 05:34	2003-06-9	Show	GitHub Exploit DB Packet Storm

279364	-	epic	epic4	EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP reques…	NVD-CWE-Other	CVE-2003-0328	2008-09-6 05:34	2003-06-9	Show	GitHub Exploit DB Packet Storm

279365	-	demarc_security	puresecure	Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.	NVD-CWE-Other	CVE-2003-0340	2008-09-6 05:34	2003-05-21	Show	GitHub Exploit DB Packet Storm

279366	-	apple kde	safari konqueror_embedded	Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.	NVD-CWE-Other	CVE-2003-0355	2008-09-6 05:34	2003-06-9	Show	GitHub Exploit DB Packet Storm

279367	-	stichting_mathematisch_centrum	nethack	nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.	NVD-CWE-Other	CVE-2003-0359	2008-09-6 05:34	2003-07-24	Show	GitHub Exploit DB Packet Storm

279368	-	debian	debian_linux	Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.	NVD-CWE-Other	CVE-2003-0360	2008-09-6 05:34	2003-06-9	Show	GitHub Exploit DB Packet Storm

279369	-	debian	debian_linux	gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.	NVD-CWE-Other	CVE-2003-0361	2008-09-6 05:34	2003-06-9	Show	GitHub Exploit DB Packet Storm

279370	-	debian	debian_linux	Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.	NVD-CWE-Other	CVE-2003-0362	2008-09-6 05:34	2003-06-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed