Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 26, 2025, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
161	9.8	緊急 Network	ZyXEL	NAS 326 ファームウェア NAS 542 ファームウェア	ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける OS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2024-29972	2025-01-24 10:10	2024-06-4	Show	GitHub Exploit DB Packet Storm

162	6.7	警告 Local	ZyXEL	NAS 326 ファームウェア NAS 542 ファームウェア	ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける脆弱性 New	CWE-269 CWE-noinfo	CVE-2024-29975	2025-01-24 10:10	2024-06-4	Show	GitHub Exploit DB Packet Storm

163	5.4	警告 Network	XWiki	xwiki	XWiki の xwiki におけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 CWE-352	CVE-2024-31985	2025-01-24 10:10	2024-04-10	Show	GitHub Exploit DB Packet Storm

164	5.4	警告 Network	bdthemes	element pack	bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-39667	2025-01-24 10:10	2024-08-1	Show	GitHub Exploit DB Packet Storm

165	5.4	警告 Network	Themeum	Tutor LMS	Themeum の WordPress 用 Tutor LMS におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-43231	2025-01-24 10:10	2024-08-12	Show	GitHub Exploit DB Packet Storm

166	7.2	重要 Network	Themeum	Tutor LMS	Themeum の WordPress 用 Tutor LMS における SQL インジェクションの脆弱性 New	CWE-89 SQLインジェクション	CVE-2024-43282	2025-01-24 10:10	2024-08-18	Show	GitHub Exploit DB Packet Storm

167	4.8	警告 Network	WP Ninjas, LLC.	Ninja Forms	Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 CWE-79	CVE-2024-50514	2025-01-24 10:10	2024-11-19	Show	GitHub Exploit DB Packet Storm

168	8	重要 Network	wpWax	legal pages	wpWax の WordPress 用 legal pages におけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 CWE-863	CVE-2023-50886	2025-01-24 09:59	2023-12-15	Show	GitHub Exploit DB Packet Storm

169	6.1	警告 Network	Themeisle	otter blocks	ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1691	2025-01-24 09:59	2024-03-13	Show	GitHub Exploit DB Packet Storm

170	5.4	警告 Network	properfraction	profilepress	properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1806	2025-01-24 09:59	2024-03-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274781	-	apple	mac_os_x mac_os_x_server	Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript …	CWE-310 Cryptographic Issues	CVE-2009-2808	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274782	-	apple	mac_os_x mac_os_x_server	Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary co…	NVD-CWE-Other	CVE-2009-2810	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274783	-	apple	mac_os_x mac_os_x_server	Per: http://support.apple.com/kb/HT3937 "This issue does not affect systems prior to Mac OS X v10.6"	NVD-CWE-Other	CVE-2009-2810	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274784	-	apple	mac_os_x mac_os_x_server	Per: http://support.apple.com/kb/HT3937 * Help Viewer CVE-ID: CVE-2009-2808 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 and v10.6.1, Mac…	CWE-310 Cryptographic Issues	CVE-2009-2808	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274785	-	apple	mac_os_x_server	Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-2818	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274786	-	apple	mac_os_x_server	Per: http://support.apple.com/kb/HT3937 "This issue only affects Mac OS X Server systems. "	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-2818	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274787	-	apple	mac_os_x mac_os_x_server	AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors.	CWE-399 Resource Management Errors	CVE-2009-2819	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274788	-	apple	mac_os_x mac_os_x_server	Per: http://support.apple.com/kb/HT3937 "These issues do not affect Mac OS X v10.6 systems"	CWE-399 Resource Management Errors	CVE-2009-2819	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274789	-	apple	mac_os_x mac_os_x_server	Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-2824	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

274790	-	apple	mac_os_x mac_os_x_server	Per: http://support.apple.com/kb/HT3937 "These issues do not affect Mac OS X v10.6 systems"	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-2824	2009-11-17 16:02	2009-11-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed