Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1601 5.3 警告
Network
NetApp
日本電気
ISC, Inc.
Active IQ Unified Manager
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
BIND
ISC, Inc. の BIND 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足
CVE-2023-5680 2025-01-17 13:18 2023-10-20 Show GitHub Exploit DB Packet Storm
1602 7.5 重要
Network
日本電気
Fedora Project
NetApp
ISC, Inc.
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND
NetApp の Active IQ Unified Manager 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足
CVE-2023-5679 2025-01-17 13:13 2023-10-20 Show GitHub Exploit DB Packet Storm
1603 7.5 重要
Network
日本電気
Fedora Project
NetApp
ISC, Inc.
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND
NetApp の Active IQ Unified Manager 等複数ベンダの製品における到達可能なアサーションに関する脆弱性 CWE-617
CWE-617
CVE-2023-5517 2025-01-17 13:12 2023-10-11 Show GitHub Exploit DB Packet Storm
1604 7.5 重要
Network
Fedora Project
日本電気
ISC, Inc.
NEC Multimedia OLAP for 映像分析サービス
Fedora
ESMPRO/ServerAgent
BIND
NetApp の ONTAP (旧 Clustered Data ONTAP) 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足
CVE-2023-4408 2025-01-17 13:10 2023-08-18 Show GitHub Exploit DB Packet Storm
1605 9.8 緊急
Network
Apache Software Foundation Apache Struts Apache Struts 2 における外部からアクセス可能なファイルの脆弱性 (S2-066) CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2023-50164 2025-01-17 12:58 2023-12-8 Show GitHub Exploit DB Packet Storm
1606 9.8 緊急
Network
Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 CWE-74
CWE-74
CVE-2023-51388 2025-01-17 12:08 2023-12-18 Show GitHub Exploit DB Packet Storm
1607 9.8 緊急
Network
Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CWE-288
CVE-2024-13179 2025-01-17 12:08 2025-01-14 Show GitHub Exploit DB Packet Storm
1608 5.4 警告
Network
Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13183 2025-01-17 12:08 2025-01-10 Show GitHub Exploit DB Packet Storm
1609 4.3 警告
Network
Progress Software Corporation MOVEit Transfer Progress Software Corporation の MOVEit Transfer における脆弱性 CWE-778
CWE-Other
CVE-2024-2291 2025-01-17 12:08 2024-03-20 Show GitHub Exploit DB Packet Storm
1610 4.8 警告
Network
MantisBT Group MantisBT MantisBT Group の MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-34081 2025-01-17 12:08 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276891 - xine xine-lib Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib o… NVD-CWE-noinfo
CVE-2008-5244 2009-02-20 15:45 2008-11-26 Show GitHub Exploit DB Packet Storm
276892 - sourceforge wow_raid_manager Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2008-6161 2009-02-19 14:00 2009-02-19 Show GitHub Exploit DB Packet Storm
276893 - hitachi jp1_integrated_management_service_support Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote att… CWE-79
Cross-site Scripting
CVE-2008-5717 2009-02-18 15:25 2008-12-27 Show GitHub Exploit DB Packet Storm
276894 - hitachi jp1_integrated_management_service_support Fixed in the following versions: Product name: JP1/Integrated Management - Service Support Version(s): Windows 08-10-06 December 10, 2008 08-11-04 December 10, 2008 08-50-04 D… CWE-79
Cross-site Scripting
CVE-2008-5717 2009-02-18 15:25 2008-12-27 Show GitHub Exploit DB Packet Storm
276895 - hitachi groupmax_web_workflow_sdk_set_for_active_server_pages
groupmax_workflow_to_development_kit_for_active_server_pages
Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-/C and Hitachi Groupmax Workflow - Development Kit for Active Server Pages befor… CWE-79
Cross-site Scripting
CVE-2008-5719 2009-02-18 15:25 2008-12-27 Show GitHub Exploit DB Packet Storm
276896 - sun java_system_directory_server Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or … CWE-20
 Improper Input Validation 
CVE-2009-0609 2009-02-18 14:00 2009-02-18 Show GitHub Exploit DB Packet Storm
276897 - dminnich simple_php_news Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the (1) title or (2) date parameter, and … CWE-94
Code Injection
CVE-2009-0610 2009-02-18 14:00 2009-02-18 Show GitHub Exploit DB Packet Storm
276898 - research_in_motion_limited blackberry_application_web_loader Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execut… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2009-0305 2009-02-17 15:57 2009-02-11 Show GitHub Exploit DB Packet Storm
276899 - w3c amaya_web_browser Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "du… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-6005 2009-02-17 15:56 2009-01-29 Show GitHub Exploit DB Packet Storm
276900 - ldrolez tkusr tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file. CWE-59
Link Following
CVE-2008-5136 2009-02-17 15:53 2008-11-19 Show GitHub Exploit DB Packet Storm