Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1611 8.8 重要
Network 		oretnom23 Laundry Shop Management System Oretnom23 の Laundry Shop Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3466 2025-01-17 12:08 2024-04-8 Show GitHub Exploit DB Packet Storm
1612 4.3 警告
Network 		Brizy brizy Brizy の WordPress 用 brizy における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-3711 2025-01-17 12:02 2024-05-23 Show GitHub Exploit DB Packet Storm
1613 9.8 緊急
Network 		Apache Software Foundation Apache Xerces-C++ Apache Software Foundation の Apache Xerces-C++ における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-23807 2025-01-17 12:02 2024-02-29 Show GitHub Exploit DB Packet Storm
1614 5.3 警告
Network 		MantisBT Group MantisBT MantisBT Group の MantisBT における脆弱性 CWE-200
CWE-noinfo
CVE-2024-34080 2025-01-17 12:02 2024-05-14 Show GitHub Exploit DB Packet Storm
1615 8.8 重要
Network 		Brizy brizy Brizy の WordPress 用 brizy における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-1311 2025-01-17 11:58 2024-03-13 Show GitHub Exploit DB Packet Storm
1616 5.3 警告
Network 		zestard admin side data storage for contact form 7 zestard の WordPress 用 admin side data storage for contact form 7 における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1779 2025-01-17 11:58 2024-02-23 Show GitHub Exploit DB Packet Storm
1617 8.8 重要
Network 		Progress Software Corporation telerik report server Progress Software Corporation の telerik report server における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-1800 2025-01-17 11:58 2024-03-20 Show GitHub Exploit DB Packet Storm
1618 7.5 重要
Network 		Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-13180 2025-01-17 11:58 2025-01-14 Show GitHub Exploit DB Packet Storm
1619 - - Belledonne Communications Linphone-Desktop Belledonne Communications 製 Linphone-Desktop における NULL ポインタ参照の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-0430 2025-01-17 11:56 2025-01-16 Show GitHub Exploit DB Packet Storm
1620 9.8 緊急
Network 		Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 CWE-74
CWE-74
CVE-2023-51653 2025-01-17 11:54 2023-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 10, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275491 - apc network_management_card
switched_rack_pdu 		Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other dev… CWE-79
Cross-site Scripting 		CVE-2009-1798 2010-06-29 13:00 2009-12-29 Show GitHub Exploit DB Packet Storm
275492 - ibm db2 The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external … CWE-20
 Improper Input Validation  		CVE-2009-4325 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275493 - ibm db2 The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return va… CWE-200
Information Exposure 		CVE-2009-4326 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275494 - ibm db2 The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a… CWE-20
 Improper Input Validation  		CVE-2009-4327 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275495 - ibm db2 Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (server trap) by calling a SQL stored procedure in un… NVD-CWE-noinfo
CVE-2009-4328 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275496 - ibm db2 Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors. NVD-CWE-noinfo
CVE-2009-4330 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275497 - ibm db2 db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service (NULL pointer dereference and application termination) via unsp… NVD-CWE-Other
CVE-2009-4332 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275498 - ibm db2 Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference' NVD-CWE-Other
CVE-2009-4332 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275499 - ibm db2 The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR… CWE-200
Information Exposure 		CVE-2009-4333 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm
275500 - ibm db2 The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial o… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-4334 2010-06-29 13:00 2009-12-17 Show GitHub Exploit DB Packet Storm