Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1601 5.3 警告
Network
NetApp
日本電気
ISC, Inc.
Active IQ Unified Manager
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
BIND
ISC, Inc. の BIND 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足
CVE-2023-5680 2025-01-17 13:18 2023-10-20 Show GitHub Exploit DB Packet Storm
1602 7.5 重要
Network
日本電気
Fedora Project
NetApp
ISC, Inc.
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND
NetApp の Active IQ Unified Manager 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足
CVE-2023-5679 2025-01-17 13:13 2023-10-20 Show GitHub Exploit DB Packet Storm
1603 7.5 重要
Network
日本電気
Fedora Project
NetApp
ISC, Inc.
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND
NetApp の Active IQ Unified Manager 等複数ベンダの製品における到達可能なアサーションに関する脆弱性 CWE-617
CWE-617
CVE-2023-5517 2025-01-17 13:12 2023-10-11 Show GitHub Exploit DB Packet Storm
1604 7.5 重要
Network
Fedora Project
日本電気
ISC, Inc.
NEC Multimedia OLAP for 映像分析サービス
Fedora
ESMPRO/ServerAgent
BIND
NetApp の ONTAP (旧 Clustered Data ONTAP) 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足
CVE-2023-4408 2025-01-17 13:10 2023-08-18 Show GitHub Exploit DB Packet Storm
1605 9.8 緊急
Network
Apache Software Foundation Apache Struts Apache Struts 2 における外部からアクセス可能なファイルの脆弱性 (S2-066) CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2023-50164 2025-01-17 12:58 2023-12-8 Show GitHub Exploit DB Packet Storm
1606 9.8 緊急
Network
Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 CWE-74
CWE-74
CVE-2023-51388 2025-01-17 12:08 2023-12-18 Show GitHub Exploit DB Packet Storm
1607 9.8 緊急
Network
Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CWE-288
CVE-2024-13179 2025-01-17 12:08 2025-01-14 Show GitHub Exploit DB Packet Storm
1608 5.4 警告
Network
Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13183 2025-01-17 12:08 2025-01-10 Show GitHub Exploit DB Packet Storm
1609 4.3 警告
Network
Progress Software Corporation MOVEit Transfer Progress Software Corporation の MOVEit Transfer における脆弱性 CWE-778
CWE-Other
CVE-2024-2291 2025-01-17 12:08 2024-03-20 Show GitHub Exploit DB Packet Storm
1610 4.8 警告
Network
MantisBT Group MantisBT MantisBT Group の MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-34081 2025-01-17 12:08 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274941 - navision financials_server Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the lic… NVD-CWE-Other
CVE-2001-0393 2016-10-18 11:10 2001-06-18 Show GitHub Exploit DB Packet Storm
274942 - caucho_technology resin Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request. NVD-CWE-Other
CVE-2001-0399 2016-10-18 11:10 2001-06-18 Show GitHub Exploit DB Packet Storm
274943 - sun javaserver_web_dev_kit Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory. NVD-CWE-Other
CVE-2001-0404 2016-10-18 11:10 2001-06-18 Show GitHub Exploit DB Packet Storm
274944 - ibm http_server IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request. NVD-CWE-Other
CVE-2000-1168 2016-10-18 11:09 2001-01-9 Show GitHub Exploit DB Packet Storm
274945 - jon_atkins imwheel imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. NVD-CWE-Other
CVE-2000-1190 2016-10-18 11:09 2001-08-31 Show GitHub Exploit DB Packet Storm
274946 - university_of_washington imap POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of ma… NVD-CWE-Other
CVE-2000-1197 2016-10-18 11:09 2001-08-31 Show GitHub Exploit DB Packet Storm
274947 - redhat linux userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format str… NVD-CWE-Other
CVE-2000-1207 2016-10-18 11:09 2000-09-30 Show GitHub Exploit DB Packet Storm
274948 - immunix
netbsd
openbsd
redhat
immunix
netbsd
openbsd
linux
Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from t… NVD-CWE-Other
CVE-2000-1208 2016-10-18 11:09 2002-08-12 Show GitHub Exploit DB Packet Storm
274949 - apache tomcat Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp. NVD-CWE-Other
CVE-2000-1210 2016-10-18 11:09 2002-03-22 Show GitHub Exploit DB Packet Storm
274950 - immunix
iputils
redhat
immunix
iputils
linux
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to … NVD-CWE-Other
CVE-2000-1213 2016-10-18 11:09 2000-10-18 Show GitHub Exploit DB Packet Storm