Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1481	7.8	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-27395	2025-01-17 18:03	2024-04-24	Show	GitHub Exploit DB Packet Storm

1482	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2024-26653	2025-01-17 17:59	2024-03-26	Show	GitHub Exploit DB Packet Storm

1483	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-47217	2025-01-17 17:57	2021-11-15	Show	GitHub Exploit DB Packet Storm

1484	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-52643	2025-01-17 17:57	2023-12-8	Show	GitHub Exploit DB Packet Storm

1485	4.7	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2023-52785	2025-01-17 17:57	2023-11-8	Show	GitHub Exploit DB Packet Storm

1486	7.1	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2024-38560	2025-01-17 17:52	2024-05-6	Show	GitHub Exploit DB Packet Storm

1487	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-47211	2025-01-17 17:49	2021-10-26	Show	GitHub Exploit DB Packet Storm

1488	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2021-47106	2025-01-17 17:49	2021-12-15	Show	GitHub Exploit DB Packet Storm

1489	7.5	重要 Network	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Window…	Windows ライトウェイトディレクトリアクセスプロトコル (LDAP) のサービス拒否の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49113	2025-01-17 17:46	2024-12-10	Show	GitHub Exploit DB Packet Storm

1490	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-56581	2025-01-17 17:45	2024-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276511	-	nostatic	digitaldj	fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.	CWE-59 Link Following	CVE-2008-4948	2009-08-26 14:17	2008-11-6	Show	GitHub Exploit DB Packet Storm

276512	-	fumitoshi_ukai	fml	mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file.	CWE-59 Link Following	CVE-2008-4954	2009-08-26 14:17	2008-11-6	Show	GitHub Exploit DB Packet Storm

276513	-	dov_grobgeld	impose\+	impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.	CWE-59 Link Following	CVE-2008-4960	2009-08-26 14:17	2008-11-6	Show	GitHub Exploit DB Packet Storm

276514	-	adobe	coldfusion	Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.	CWE-287 Improper Authentication	CVE-2009-1878	2009-08-26 13:00	2009-08-19	Show	GitHub Exploit DB Packet Storm

276515	-	buildbot	buildbot	Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2009-2959	2009-08-26 02:30	2009-08-26	Show	GitHub Exploit DB Packet Storm

276516	-	calimero.cms	calimero.cms	Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a calimero_webpage action.	CWE-79 Cross-site Scripting	CVE-2008-0749	2009-08-25 14:09	2008-02-14	Show	GitHub Exploit DB Packet Storm

276517	-	ajsquare	free_polling_script	AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. …	CWE-287 Improper Authentication	CVE-2008-7046	2009-08-24 19:30	2009-08-24	Show	GitHub Exploit DB Packet Storm

276518	-	wowraidmanager	wowraidmanager	The password_check function in auth/auth_phpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, (1) does not invoke the CheckPassword function with the required argume…	CWE-255 Credentials Management	CVE-2008-7050	2009-08-24 19:30	2009-08-24	Show	GitHub Exploit DB Packet Storm

276519	-	cisco	ios_xr	Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Att…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1154	2009-08-22 02:30	2009-08-22	Show	GitHub Exploit DB Packet Storm

276520	-	cisco	ios_xr	Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-2056	2009-08-22 02:30	2009-08-22	Show	GitHub Exploit DB Packet Storm