Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 7.5 重要
Network 		Apache Software Foundation
日立		 Hitachi Application Server for Developers
uCosminexus Developer
Hitachi Web Server
uCosminexus Application Server Express
uCosminexus&nbs… 		Apache Software Foundation の Apache HTTP Server 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-38477 2025-01-30 15:09 2024-07-1 Show GitHub Exploit DB Packet Storm
132 - - OpenSSL Project OpenSSL OpenSSL の関数 SSL_select_next_proto におけるバッファオーバーリードの脆弱性（OpenSSL Security Advisory [27th June 2024]） CWE-126
バッファオーバーリード 		CVE-2024-5535 2025-01-30 14:50 2024-07-3 Show GitHub Exploit DB Packet Storm
133 9.8 緊急
Network 		SQLite SQLite SQLite における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2020-11656 2025-01-30 14:08 2020-04-3 Show GitHub Exploit DB Packet Storm
134 - - B&R Industrial Automation Automation Runtime
B&R mapp View 		複数の B&R 製品における非推奨暗号アルゴリズムの使用の脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2024-8603 2025-01-30 13:51 2025-01-29 Show GitHub Exploit DB Packet Storm
135 7.5 重要
Network 		マイクロソフト Microsoft Entra ID Microsoft Entra ID の特権昇格の脆弱性 CWE-284
CWE-Other
CVE-2024-43477 2025-01-30 13:32 2024-08-22 Show GitHub Exploit DB Packet Storm
136 8.8 重要
Network 		マイクロソフト Azure Managed Instance for Apache Cassandra Azure Managed Instance for Apache Cassandra の特権昇格の脆弱性 CWE-284
CWE-Other
CVE-2024-38175 2025-01-30 12:29 2024-08-20 Show GitHub Exploit DB Packet Storm
137 8.8 重要
Network 		マイクロソフト Microsoft SQL Server Microsoft SQL Server の特権昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2024-37965 2025-01-30 12:17 2024-09-10 Show GitHub Exploit DB Packet Storm
138 4.3 警告
Network 		Linkz.ai Linkz.ai - Automatic link previews on hover Linkz.ai の WordPress 用 Linkz.ai - Automatic link previews on hover における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-9587 2025-01-30 12:12 2024-10-11 Show GitHub Exploit DB Packet Storm
139 7.5 重要
Network 		デル NativeEdge Orchestrator デルの NativeEdge Orchestrator における脆弱性 CWE-1230
CWE-noinfo
CVE-2024-53291 2025-01-30 12:09 2024-12-25 Show GitHub Exploit DB Packet Storm
140 7.8 重要
Local 		デル NativeEdge Orchestrator デルの NativeEdge Orchestrator における脆弱性 CWE-250
CWE-noinfo
CVE-2024-47978 2025-01-30 12:08 2024-12-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273891 - nonnoi_solutions asp_barcode The Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function. NVD-CWE-Other
CVE-2007-3660 2012-11-6 12:42 2007-07-11 Show GitHub Exploit DB Packet Storm
273892 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the… NVD-CWE-Other
CVE-2007-2909 2012-11-6 12:40 2007-05-30 Show GitHub Exploit DB Packet Storm
273893 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_pl… CWE-79
Cross-site Scripting 		CVE-2007-2910 2012-11-6 12:40 2007-05-30 Show GitHub Exploit DB Packet Storm
273894 - microsoft windows_2003_server Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an inval… NVD-CWE-Other
CVE-2007-2999 2012-11-6 12:40 2007-06-5 Show GitHub Exploit DB Packet Storm
273895 - nagiosql nagiosql PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETS[path][IT] parameter. … NVD-CWE-Other
CVE-2007-2710 2012-11-6 12:39 2007-05-16 Show GitHub Exploit DB Packet Storm
273896 - subversion subversion Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obt… NVD-CWE-Other
CVE-2007-2448 2012-11-6 12:38 2007-06-15 Show GitHub Exploit DB Packet Storm
273897 - trend_micro serverprotect Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC … NVD-CWE-Other
CVE-2007-2528 2012-11-6 12:38 2007-05-9 Show GitHub Exploit DB Packet Storm
273898 - wikkawiki wikkawiki SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQL commands via the limit parameter. NOTE: this issue only … NVD-CWE-Other
CVE-2007-2612 2012-11-6 12:38 2007-05-11 Show GitHub Exploit DB Packet Storm
273899 - kkeim kmita_gallery Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter to index.php and the (2) searchtext para… CWE-79
Cross-site Scripting 		CVE-2008-5068 2012-10-31 12:06 2008-11-14 Show GitHub Exploit DB Packet Storm
273900 - novell edirectory Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-lengt… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-5092 2012-10-31 12:06 2008-11-15 Show GitHub Exploit DB Packet Storm