Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1561 9.8 緊急
Network 		Hitachi Energy FOXMAN-UN
UNEM 		Hitachi Energy の FOXMAN-UN および UNEM における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2024-2011 2025-01-17 15:35 2024-06-11 Show GitHub Exploit DB Packet Storm
1562 6.8 警告
Physics 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microsoft Window… 		Windows モバイル ブロードバンド ドライバーの特権昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2024-49073 2025-01-17 15:33 2024-12-10 Show GitHub Exploit DB Packet Storm
1563 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Window… 		Windows Win32 カーネル サブシステムの特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-30049 2025-01-17 15:30 2024-05-14 Show GitHub Exploit DB Packet Storm
1564 9.8 緊急
Network 		Hitachi Energy FOXMAN-UN
UNEM 		Hitachi Energy の FOXMAN-UN および UNEM における脆弱性 CWE-noinfo
情報不足 		CVE-2024-2012 2025-01-17 15:25 2024-06-11 Show GitHub Exploit DB Packet Storm
1565 10 緊急
Network 		Hitachi Energy FOXMAN-UN
UNEM 		Hitachi Energy の FOXMAN-UN および UNEM における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2024-2013 2025-01-17 15:22 2024-06-11 Show GitHub Exploit DB Packet Storm
1566 7.5 重要
Network 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server 		Microsoft SharePoint Server の情報漏えいの脆弱性 CWE-611
CWE-noinfo
CVE-2024-30043 2025-01-17 15:21 2024-05-14 Show GitHub Exploit DB Packet Storm
1567 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Window… 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2024-30037 2025-01-17 15:20 2024-05-14 Show GitHub Exploit DB Packet Storm
1568 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Window… 		Windows DWM Core ライブラリの特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-30032 2025-01-17 15:08 2024-05-14 Show GitHub Exploit DB Packet Storm
1569 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Window… 		Win32k の特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-30028 2025-01-17 15:02 2024-05-14 Show GitHub Exploit DB Packet Storm
1570 7.8 重要
Local 		Progress Software Corporation telerik reporting Progress Software Corporation の telerik reporting における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-1801 2025-01-17 15:01 2024-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276661 - elvinbts elvinbts Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title (aka subject) field. CWE-79
Cross-site Scripting 		CVE-2009-2126 2009-06-22 13:00 2009-06-20 Show GitHub Exploit DB Packet Storm
276662 - elvinbts elvinbts SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field. CWE-89
SQL Injection 		CVE-2009-2128 2009-06-22 13:00 2009-06-20 Show GitHub Exploit DB Packet Storm
276663 - pagedowntech pdshoppro Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2009-2032 2009-06-20 14:29 2009-06-13 Show GitHub Exploit DB Packet Storm
276664 - apple safari Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate. CWE-255
Credentials Management 		CVE-2009-1682 2009-06-19 14:32 2009-06-10 Show GitHub Exploit DB Packet Storm
276665 - apple safari CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by p… CWE-94
Code Injection 		CVE-2009-1704 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
276666 - apple safari The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit o… CWE-200
Information Exposure 		CVE-2009-1706 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
276667 - apple safari Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain… NVD-CWE-Other
CVE-2009-1708 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
276668 - apple safari CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-1716 2009-06-19 14:32 2009-06-11 Show GitHub Exploit DB Packet Storm
276669 - sun opensolaris Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) v… NVD-CWE-noinfo
CVE-2009-2012 2009-06-19 14:32 2009-06-10 Show GitHub Exploit DB Packet Storm
276670 - sun opensolaris smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes. CWE-200
Information Exposure 		CVE-2009-2031 2009-06-19 14:32 2009-06-12 Show GitHub Exploit DB Packet Storm