Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
121 6.6 警告
Physics
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server&…
ワイヤレス広域ネットワーク サービス (WwanSvc) の特権昇格の脆弱性 New CWE-122
CWE-noinfo
CVE-2024-49081 2025-01-10 14:20 2024-12-10 Show GitHub Exploit DB Packet Storm
122 5.5 警告
Local
マイクロソフト Microsoft SharePoint Server
Microsoft 365 Apps
Microsoft Word
Microsoft SharePoint Enterprise Server
Microsoft Office
Microsoft Office のリモート コードが実行される脆弱性 New CWE-125
CWE-noinfo
CVE-2024-49065 2025-01-10 14:17 2024-12-10 Show GitHub Exploit DB Packet Storm
123 8.4 重要
Local
マイクロソフト Microsoft/Muzic Muzic のリモートでコードが実行される脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2024-49063 2025-01-10 14:11 2024-12-10 Show GitHub Exploit DB Packet Storm
124 5.5 警告
Local
マイクロソフト Microsoft Intune Mobile Application Management Microsoft Intune for Android モバイル アプリケーション管理の改ざんの脆弱性 New CWE-284
CWE-noinfo
CVE-2024-30059 2025-01-10 13:49 2024-05-14 Show GitHub Exploit DB Packet Storm
125 5.4 警告
Network
マイクロソフト Azure Migrate Azure Migrate のクロスサイト スクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-30053 2025-01-10 13:43 2024-05-14 Show GitHub Exploit DB Packet Storm
126 3.3
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window…
Windows Remote Access Connection Manager の情報漏えいの脆弱性 New CWE-125
CWE-noinfo
CVE-2024-26217 2025-01-10 12:30 2024-04-9 Show GitHub Exploit DB Packet Storm
127 7.2 重要
Network
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2012
DHCP Server Service のリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-26202 2025-01-10 12:26 2024-04-9 Show GitHub Exploit DB Packet Storm
128 6.4 警告
Adjacent
マイクロソフト Azure Migrate Azure Migrate のリモートでコードが実行される脆弱性 New CWE-285
CWE-noinfo
CVE-2024-26193 2025-01-10 12:22 2024-04-9 Show GitHub Exploit DB Packet Storm
129 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Window…
Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 New CWE-125
CWE-noinfo
CVE-2024-30025 2025-01-10 12:20 2024-05-14 Show GitHub Exploit DB Packet Storm
130 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window…
セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-125
CWE-noinfo
CVE-2024-26175 2025-01-10 12:19 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277071 - citrix nfuse Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter. NVD-CWE-Other
CVE-2002-0503 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277072 - citrix nfuse Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_… NVD-CWE-Other
CVE-2002-0504 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277073 - cisco call_manager Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) vi… NVD-CWE-Other
CVE-2002-0505 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277074 - redhat linux Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt. NVD-CWE-Other
CVE-2002-0506 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277075 - wwwisis wwwisis wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog. NVD-CWE-Other
CVE-2002-0508 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277076 - oracle oracle9i Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521. NVD-CWE-Other
CVE-2002-0509 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277077 - linux linux_kernel The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li… NVD-CWE-Other
CVE-2002-0510 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277078 - nscd nscd The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which cou… NVD-CWE-Other
CVE-2002-0511 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277079 - caldera openlinux_server
openlinux_workstation
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of oth… NVD-CWE-Other
CVE-2002-0512 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
277080 - squirrelmail squirrelmail SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie. NVD-CWE-Other
CVE-2002-0516 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm