Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1641 8 重要
Adjacent 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2012
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-121
CWE-noinfo
CVE-2024-28925 2025-01-17 10:18 2024-04-9 Show GitHub Exploit DB Packet Storm
1642 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft Visual Studio
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-191
CWE-noinfo
CVE-2024-28930 2025-01-17 09:53 2024-04-9 Show GitHub Exploit DB Packet Storm
1643 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft Visual Studio
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-28935 2025-01-17 09:48 2024-04-9 Show GitHub Exploit DB Packet Storm
1644 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-362
CWE-453
CVE-2024-49120 2025-01-17 09:47 2024-12-10 Show GitHub Exploit DB Packet Storm
1645 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft Visual Studio
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-191
CWE-noinfo
CVE-2024-28933 2025-01-17 09:47 2024-04-9 Show GitHub Exploit DB Packet Storm
1646 8.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2025 		Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-393
CWE-noinfo
CVE-2024-49117 2025-01-17 09:47 2024-12-10 Show GitHub Exploit DB Packet Storm
1647 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft Visual Studio
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-28932 2025-01-17 09:47 2024-04-9 Show GitHub Exploit DB Packet Storm
1648 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server&… 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-362
CWE-591
CVE-2024-49123 2025-01-17 09:47 2024-12-10 Show GitHub Exploit DB Packet Storm
1649 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53206 2025-01-17 09:44 2024-11-28 Show GitHub Exploit DB Packet Storm
1650 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56602 2025-01-17 09:44 2024-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278401 - freebsd freebsd The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0777 2008-09-6 06:35 2008-02-15 Show GitHub Exploit DB Packet Storm
278402 - sam_lantinga splitvt misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0162 2008-09-6 06:34 2008-02-23 Show GitHub Exploit DB Packet Storm
278403 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting 		CVE-2008-0178 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
278404 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP heade… CWE-79
Cross-site Scripting 		CVE-2008-0179 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
278405 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field … CWE-79
Cross-site Scripting 		CVE-2008-0180 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
278406 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message. CWE-79
Cross-site Scripting 		CVE-2008-0181 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
278407 - liferay liferay_enterprise_portal Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated… CWE-352
 Origin Validation Error 		CVE-2008-0182 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
278408 - ngircd ngircd ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference. NVD-CWE-Other
CVE-2008-0285 2008-09-6 06:34 2008-01-16 Show GitHub Exploit DB Packet Storm
278409 - pmachine pmachine_pro Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter. CWE-79
Cross-site Scripting 		CVE-2008-0334 2008-09-6 06:34 2008-01-18 Show GitHub Exploit DB Packet Storm
278410 - mahara mahara Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS) in uploaded files. CWE-79
Cross-site Scripting 		CVE-2008-0381 2008-09-6 06:34 2008-01-23 Show GitHub Exploit DB Packet Storm