Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1251	5.4	警告 Network	Contao	contao	Contao におけるクロスサイトスクリプティングの脆弱性	CWE-79 CWE-79	CVE-2024-28190	2025-01-20 15:15	2024-04-9	Show	GitHub Exploit DB Packet Storm

1252	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Window…	Windows CSC サービスの情報漏えいの脆弱性	CWE-125 CWE-125	CVE-2025-21374	2025-01-20 15:15	2025-01-14	Show	GitHub Exploit DB Packet Storm

1253	6.5	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-1165	2025-01-20 15:14	2024-02-26	Show	GitHub Exploit DB Packet Storm

1254	5.4	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1291	2025-01-20 15:14	2024-03-13	Show	GitHub Exploit DB Packet Storm

1255	5.4	警告 Network	Themeisle	Orbit Fox	ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1323	2025-01-20 15:14	2024-02-27	Show	GitHub Exploit DB Packet Storm

1256	4.3	警告 Network	zestard	admin side data storage for contact form 7	zestard の WordPress 用 admin side data storage for contact form 7 におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-1777	2025-01-20 15:14	2024-02-23	Show	GitHub Exploit DB Packet Storm

1257	9.1	緊急 Network	WPvivid	Migration Backup Staging	WPvivid の WordPress 用 Migration, Backup, Staging における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2024-1982	2025-01-20 15:14	2024-02-29	Show	GitHub Exploit DB Packet Storm

1258	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Window…	Windows テレフォニーサービスのリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2025-21411	2025-01-20 15:12	2025-01-14	Show	GitHub Exploit DB Packet Storm

1259	7.8	重要 Local	マイクロソフト	Microsoft Outlook Microsoft Office	Microsoft Outlook のリモートでコードが実行される脆弱性	CWE-641 CWE-noinfo	CVE-2025-21361	2025-01-20 15:10	2025-01-14	Show	GitHub Exploit DB Packet Storm

1260	6.5	警告 Network	Outlook.com	Microsoft Edge Chromium	Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性	CWE-200 CWE-359 CWE-noinfo	CVE-2024-29987	2025-01-20 15:06	2024-04-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279651	-	sapio_design_ltd	webreflex	Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.	CWE-22 Path Traversal	CVE-2002-2229	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279652	-	mollensoft_software	enceladus_server_suite	Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2232	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279653	-	netscreen	screenos	NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.	CWE-16 Configuration	CVE-2002-2234	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279654	-	jelsoft	vbulletin	member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which fac…	CWE-189 Numeric Errors	CVE-2002-2235	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279655	-	apt-www-proxy	apt-www-proxy	Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.	CWE-20 Improper Input Validation	CVE-2002-2236	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279656	-	netbsd	ftpd	ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls an…	CWE-189 Numeric Errors	CVE-2002-2245	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279657	-	hp	secure_web_server_for_tru64	Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might…	NVD-CWE-noinfo	CVE-2002-2264	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279658	-	hp	secure_web_server_for_tru64	More Information: http://www.securityfocus.com/bid/6175/info	NVD-CWE-noinfo	CVE-2002-2264	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279659	-	pyramid	benhur_software_update	The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20.	NVD-CWE-Other	CVE-2002-2307	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279660	-	netscape	communicator	Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL ta…	NVD-CWE-Other	CVE-2002-2308	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm