Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
121 7.5 重要
Network
Apache Software Foundation
日立
Hitachi Application Server for Developers
uCosminexus Developer
Hitachi Web Server
uCosminexus Application Server Express
uCosminexus&nbs…
Apache Software Foundation の Apache HTTP Server 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2024-38477 2025-01-30 15:09 2024-07-1 Show GitHub Exploit DB Packet Storm
122 - - OpenSSL Project OpenSSL OpenSSL の関数 SSL_select_next_proto におけるバッファオーバーリードの脆弱性(OpenSSL Security Advisory [27th June 2024]) CWE-126
バッファオーバーリード
CVE-2024-5535 2025-01-30 14:50 2024-07-3 Show GitHub Exploit DB Packet Storm
123 9.8 緊急
Network
SQLite SQLite SQLite における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2020-11656 2025-01-30 14:08 2020-04-3 Show GitHub Exploit DB Packet Storm
124 - - B&R Industrial Automation Automation Runtime
B&R mapp View
複数の B&R 製品における非推奨暗号アルゴリズムの使用の脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2024-8603 2025-01-30 13:51 2025-01-29 Show GitHub Exploit DB Packet Storm
125 7.5 重要
Network
マイクロソフト Microsoft Entra ID Microsoft Entra ID の特権昇格の脆弱性 CWE-284
CWE-Other
CVE-2024-43477 2025-01-30 13:32 2024-08-22 Show GitHub Exploit DB Packet Storm
126 8.8 重要
Network
マイクロソフト Azure Managed Instance for Apache Cassandra Azure Managed Instance for Apache Cassandra の特権昇格の脆弱性 CWE-284
CWE-Other
CVE-2024-38175 2025-01-30 12:29 2024-08-20 Show GitHub Exploit DB Packet Storm
127 8.8 重要
Network
マイクロソフト Microsoft SQL Server Microsoft SQL Server の特権昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2024-37965 2025-01-30 12:17 2024-09-10 Show GitHub Exploit DB Packet Storm
128 4.3 警告
Network
Linkz.ai Linkz.ai - Automatic link previews on hover Linkz.ai の WordPress 用 Linkz.ai - Automatic link previews on hover における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-9587 2025-01-30 12:12 2024-10-11 Show GitHub Exploit DB Packet Storm
129 7.5 重要
Network
デル NativeEdge Orchestrator デルの NativeEdge Orchestrator における脆弱性 CWE-1230
CWE-noinfo
CVE-2024-53291 2025-01-30 12:09 2024-12-25 Show GitHub Exploit DB Packet Storm
130 7.8 重要
Local
デル NativeEdge Orchestrator デルの NativeEdge Orchestrator における脆弱性 CWE-250
CWE-noinfo
CVE-2024-47978 2025-01-30 12:08 2024-12-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274521 - novell zenworks_patch_management_server Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/d… NVD-CWE-Other
CVE-2005-3315 2011-03-8 11:26 2005-10-31 Show GitHub Exploit DB Packet Storm
274522 - mantis mantis SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-3336 2011-03-8 11:26 2005-10-27 Show GitHub Exploit DB Packet Storm
274523 - norman_ramsey noweb noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm. NVD-CWE-Other
CVE-2005-3342 2011-03-8 11:26 2005-12-31 Show GitHub Exploit DB Packet Storm
274524 - trend_micro pc-cillin_2005 The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service (d… NVD-CWE-Other
CVE-2005-3360 2011-03-8 11:26 2005-12-15 Show GitHub Exploit DB Packet Storm
274525 - luca_deri ntop The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbi… NVD-CWE-Other
CVE-2005-3387 2011-03-8 11:26 2005-11-1 Show GitHub Exploit DB Packet Storm
274526 - snitz_communications snitz_forums_2000 Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method. NVD-CWE-Other
CVE-2005-3411 2011-03-8 11:26 2005-11-2 Show GitHub Exploit DB Packet Storm
274527 - 10-4_aps asp_fast_forum Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter. NVD-CWE-Other
CVE-2005-3422 2011-03-8 11:26 2005-11-2 Show GitHub Exploit DB Packet Storm
274528 - gnu gnump3d Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425. NVD-CWE-Other
CVE-2005-3424 2011-03-8 11:26 2005-11-2 Show GitHub Exploit DB Packet Storm
274529 - f-secure f-secure_anti-virus
internet_gatekeeper
Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read… NVD-CWE-Other
CVE-2005-3468 2011-03-8 11:26 2005-11-3 Show GitHub Exploit DB Packet Storm
274530 - - - Directory traversal vulnerability in the ruleset view for MailWatch for MailScanner 1.0.2 allows remote attackers to access arbitrary files. NVD-CWE-Other
CVE-2005-3471 2011-03-8 11:26 2005-11-3 Show GitHub Exploit DB Packet Storm