Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1671 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-38589 2025-01-16 17:50 2024-05-16 Show GitHub Exploit DB Packet Storm
1672 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2019 		Windows Defender Credential Guard の特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-26237 2025-01-16 17:48 2024-04-9 Show GitHub Exploit DB Packet Storm
1673 9.8 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 の特権の昇格の脆弱性 CWE-1390
CWE-noinfo
CVE-2024-38182 2025-01-16 17:42 2024-07-31 Show GitHub Exploit DB Packet Storm
1674 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2024-36973 2025-01-16 17:40 2024-06-4 Show GitHub Exploit DB Packet Storm
1675 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-35998 2025-01-16 17:38 2024-04-25 Show GitHub Exploit DB Packet Storm
1676 6.5 警告
Network 		VillaTheme Thank You Page Customizer for WooCommerce - Increase Your Sales VillaTheme の WordPress 用 Thank You Page Customizer for WooCommerce - Increase Your Sales における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1686 2025-01-16 17:31 2024-02-27 Show GitHub Exploit DB Packet Storm
1677 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2023-52837 2025-01-16 17:27 2023-11-7 Show GitHub Exploit DB Packet Storm
1678 8.8 重要
Network 		マイクロソフト Microsoft Visual Studio
Microsoft SQL Server
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-125
CWE-noinfo
CVE-2024-28938 2025-01-16 17:26 2024-04-9 Show GitHub Exploit DB Packet Storm
1679 7.5 重要
Network 		クアルコム QCA6584AU ファームウェア
fastconnect 7800 ファームウェア
qcm8550 ファームウェア
fastconnect 6900 ファームウェア
qcn9024 ファームウェア
qcc710 ファームウェア
qcm4490 ファームウェア
fa… 		複数のクアルコム製品における脆弱性 CWE-20
CWE-noinfo
CVE-2023-33100 2025-01-16 17:25 2023-05-17 Show GitHub Exploit DB Packet Storm
1680 7.8 重要
Local 		クアルコム fastconnect 7800 ファームウェア
fastconnect 6800 ファームウェア
fastconnect 6900 ファームウェア
AQT1000 ファームウェア
flight rb5 5g ファームウェア
fastconnect 6700… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-21468 2025-01-16 17:25 2024-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278931 - xerox workcentre Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a "Validate Repository SS… NVD-CWE-Other
CVE-2006-6468 2008-09-6 06:14 2006-12-12 Show GitHub Exploit DB Packet Storm
278932 - xerox workcentre Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres port (5432/tcp), which has unknown impact and remote attac… NVD-CWE-Other
CVE-2006-6469 2008-09-6 06:14 2006-12-12 Show GitHub Exploit DB Packet Storm
278933 - xerox workcentre The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returns no error for a non-writable object, which has unknown impa… NVD-CWE-Other
CVE-2006-6470 2008-09-6 06:14 2006-12-12 Show GitHub Exploit DB Packet Storm
278934 - xerox workcentre Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for certain files, which allows unspecified file access. NVD-CWE-Other
CVE-2006-6471 2008-09-6 06:14 2006-12-12 Show GitHub Exploit DB Packet Storm
278935 - xerox workcentre The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown im… NVD-CWE-Other
CVE-2006-6472 2008-09-6 06:14 2006-12-12 Show GitHub Exploit DB Packet Storm
278936 - xerox workcentre Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 have unknown impact and attack vectors, rela… NVD-CWE-Other
CVE-2006-6473 2008-09-6 06:14 2006-12-12 Show GitHub Exploit DB Packet Storm
278937 - mantis mantis Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency o… NVD-CWE-Other
CVE-2006-6515 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278938 - drupal chatroom_module The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overvie… NVD-CWE-Other
CVE-2006-6529 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278939 - oscommerce oscommerce Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_… NVD-CWE-Other
CVE-2006-6534 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm
278940 - cilem cilem_haber Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbitrary web script or HTML via the hata parameter. NOTE: The provenance of this i… NVD-CWE-Other
CVE-2006-6536 2008-09-6 06:14 2006-12-14 Show GitHub Exploit DB Packet Storm