Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1291	8.8	重要 Network	マイクロソフト	Microsoft SQL Server	SQL Server Native Client OLE DB プロバイダーのリモートコード実行に対する脆弱性	CWE-416 CWE-noinfo	CVE-2024-21332	2025-01-20 13:47	2024-07-9	Show	GitHub Exploit DB Packet Storm

1292	5.3	警告 Network	Debian レッドハット Fedora Project Net-SNMP	Red Hat Enterprise Linux for IBM z Systems Debian GNU/Linux enterprise linux for arm 64 enterprise linux for arm&nb…	Net-SNMP の Net-SNMP 等複数ベンダの製品における脆弱性	CWE-20 CWE-noinfo	CVE-2022-24806	2025-01-20 13:28	2022-02-10	Show	GitHub Exploit DB Packet Storm

1293	6.5	警告 Network	Debian レッドハット Fedora Project Net-SNMP	Red Hat Enterprise Linux for IBM z Systems Debian GNU/Linux enterprise linux for arm 64 enterprise linux for arm&nb…	Net-SNMP の Net-SNMP 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性	CWE-476 CWE-476	CVE-2022-24809	2025-01-20 13:27	2022-02-10	Show	GitHub Exploit DB Packet Storm

1294	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2024-57799	2025-01-20 12:28	2024-12-8	Show	GitHub Exploit DB Packet Storm

1295	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-56551	2025-01-20 12:25	2024-11-21	Show	GitHub Exploit DB Packet Storm

1296	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel におけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2024-55642	2025-01-20 12:23	2024-12-10	Show	GitHub Exploit DB Packet Storm

1297	5.4	警告 Network	bdthemes	element pack	bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-0837	2025-01-20 12:21	2024-04-6	Show	GitHub Exploit DB Packet Storm

1298	5.4	警告 Network	SiteOrigin	siteorigin widgets bundle	SiteOrigin の WordPress 用 siteorigin widgets bundle におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1058	2025-01-20 12:21	2024-02-29	Show	GitHub Exploit DB Packet Storm

1299	5.4	警告 Network	bdthemes	element pack	bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1428	2025-01-20 12:21	2024-04-6	Show	GitHub Exploit DB Packet Storm

1300	5.4	警告 Network	Livemesh	Livemesh Addons for Elementor	Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1464	2025-01-20 12:21	2024-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279721	-	npds	npds	Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1804	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279722	-	dacode	dacode	Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1805	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279723	-	drupal	drupal	Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1806	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279724	-	phpwebsite	phpwebsite	Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1807	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279725	-	zack_coburn	meunity_community_system	Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic.	NVD-CWE-Other	CVE-2002-1808	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279726	-	belkin	f5d6130_wnap	Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests.	NVD-CWE-Other	CVE-2002-1811	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279727	-	gdam	gdam	Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.	NVD-CWE-Other	CVE-2002-1812	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279728	-	aol	instant_messenger	Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.	NVD-CWE-Other	CVE-2002-1813	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279729	-	gnome mandrakesoft redhat slackware	bonobo mandrake_linux linux slackware_linux	Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.	NVD-CWE-Other	CVE-2002-1814	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

279730	-	aquonics_scripting	aquonics_file_manager	Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.	NVD-CWE-Other	CVE-2002-1815	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed