Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1501 7.8 重要
Local 		Debian
Linux		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-26895 2025-01-17 17:21 2024-02-15 Show GitHub Exploit DB Packet Storm
1502 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-56787 2025-01-17 17:21 2024-10-18 Show GitHub Exploit DB Packet Storm
1503 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2024-56783 2025-01-17 17:16 2024-11-28 Show GitHub Exploit DB Packet Storm
1504 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における境界条件の判定に関する脆弱性 CWE-193
CWE-401
CVE-2024-56720 2025-01-17 17:14 2024-11-6 Show GitHub Exploit DB Packet Storm
1505 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-46715 2025-01-17 17:12 2024-06-13 Show GitHub Exploit DB Packet Storm
1506 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2022-48648 2025-01-17 17:10 2022-09-19 Show GitHub Exploit DB Packet Storm
1507 8.8 重要
Network 		Huawei EGRT-00 ファームウェア Huawei の EGRT-00 ファームウェアにおける古典的バッファオーバーフローの脆弱性 CWE-119
CWE-120
CVE-2022-48681 2025-01-17 17:07 2024-05-28 Show GitHub Exploit DB Packet Storm
1508 4.7 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における Time-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
CWE-476
CVE-2024-42107 2025-01-17 17:06 2024-07-3 Show GitHub Exploit DB Packet Storm
1509 6.1 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2023-52497 2025-01-17 17:04 2023-12-15 Show GitHub Exploit DB Packet Storm
1510 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2022 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-362
CWE-843
CVE-2024-49119 2025-01-17 16:59 2024-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275561 - dlink dir-615 The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to (1) change the admin password via the admin_password parameter, … CWE-287
Improper Authentication 		CVE-2009-4821 2010-04-28 13:00 2010-04-28 Show GitHub Exploit DB Packet Storm
275562 - james_glasgow
john_vandervort 		autologout Cross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users with administer autologout privi… CWE-79
Cross-site Scripting 		CVE-2009-4829 2010-04-28 13:00 2010-04-28 Show GitHub Exploit DB Packet Storm
275563 - dragonfrugal dfd_cart Multiple cross-site request forgery (CSRF) vulnerabilities in admin/configure.php in DFD Cart 1.198, 1.197, and earlier allow remote attackers to hijack the authentication of administrators for reque… CWE-352
 Origin Validation Error 		CVE-2010-1542 2010-04-28 01:43 2010-04-27 Show GitHub Exploit DB Packet Storm
275564 - mearra addthis Cross-site scripting (XSS) vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to in… CWE-79
Cross-site Scripting 		CVE-2010-1536 2010-04-28 01:04 2010-04-27 Show GitHub Exploit DB Packet Storm
275565 - wolfram webmathematica Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP script, which reveals the installation path in an error message. CWE-200
Information Exposure 		CVE-2009-4812 2010-04-28 00:30 2010-04-28 Show GitHub Exploit DB Packet Storm
275566 - mybboard mybb Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action. CWE-79
Cross-site Scripting 		CVE-2009-4813 2010-04-28 00:30 2010-04-28 Show GitHub Exploit DB Packet Storm
275567 - typo3 typo3 Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote atta… CWE-79
Cross-site Scripting 		CVE-2009-0816 2010-04-27 14:49 2009-03-5 Show GitHub Exploit DB Packet Storm
275568 - reyero i18n Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks pr… CWE-79
Cross-site Scripting 		CVE-2010-1530 2010-04-27 13:00 2010-04-27 Show GitHub Exploit DB Packet Storm
275569 - givesight com_powermail Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact… CWE-22
Path Traversal 		CVE-2010-1532 2010-04-27 13:00 2010-04-27 Show GitHub Exploit DB Packet Storm
275570 - dragonfrugal dfd_cart Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity para… CWE-79
Cross-site Scripting 		CVE-2010-1541 2010-04-27 13:00 2010-04-27 Show GitHub Exploit DB Packet Storm