Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
161 5.5 警告
Local 		xpdfreader project xpdf Glyph & Cog, LLC の Xpdf における再帰制御に関する脆弱性 New CWE-674
CWE-674
CVE-2024-4568 2025-01-30 11:14 2024-05-6 Show GitHub Exploit DB Packet Storm
162 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-4643 2025-01-30 11:14 2024-08-2 Show GitHub Exploit DB Packet Storm
163 4.4 警告
Local 		デル NativeEdge Orchestrator デルの NativeEdge Orchestrator における誤った領域へのリソースの漏えいに関する脆弱性 New CWE-378
CWE-668
CVE-2024-52543 2025-01-30 11:13 2024-12-25 Show GitHub Exploit DB Packet Storm
164 9.8 緊急
Network 		OpenImageIO project OpenImageIO OpenImageIO project の OpenImageIO における脆弱性 New CWE-476
CWE-Other
CVE-2024-55193 2025-01-30 11:13 2024-12-6 Show GitHub Exploit DB Packet Storm
165 9.8 緊急
Network 		Projectworlds online food ordering system Projectworlds の online food ordering system における SQL インジェクションの脆弱性 New CWE-89
CWE-89
CVE-2024-57328 2025-01-30 11:13 2025-01-23 Show GitHub Exploit DB Packet Storm
166 5.3 警告
Network 		Linkz.ai Linkz.ai - Automatic link previews on hover Linkz.ai の WordPress 用 Linkz.ai - Automatic link previews on hover における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-9586 2025-01-30 11:13 2024-10-11 Show GitHub Exploit DB Packet Storm
167 4.3 警告
Network 		WPMU DEV forminator forms WPMU DEV の WordPress 用 forminator forms におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-9351 2025-01-30 10:56 2024-10-17 Show GitHub Exploit DB Packet Storm
168 7.1 重要
Local 		デル powerstoreos デルの powerstoreos における引数の挿入または変更に関する脆弱性 New CWE-88
引数の挿入または変更 		CVE-2024-51532 2025-01-30 10:55 2024-12-19 Show GitHub Exploit DB Packet Storm
169 5.4 警告
Network 		Themeum tutor lms elementor addons Themeum の WordPress 用 tutor lms elementor addons におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-5576 2025-01-30 10:55 2024-08-20 Show GitHub Exploit DB Packet Storm
170 5.4 警告
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4484 2025-01-30 10:50 2024-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280151 - hp photosmart_print_driver HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory with world-writable permissions, which allows local users to gain … NVD-CWE-Other
CVE-2002-0529 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280152 - emumail emumail
emumail_red_hat_linux
emumail_unix 		Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in the type parameter. NVD-CWE-Other
CVE-2002-0531 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280153 - emumail emumail
emumail_red_hat_linux
emumail_unix 		EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contai… NVD-CWE-Other
CVE-2002-0532 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280154 - postboard postboard PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags. NVD-CWE-Other
CVE-2002-0534 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280155 - phpgroupware phpgroupware PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack. NVD-CWE-Other
CVE-2002-0536 2008-09-6 05:28 2002-07-3 Show GitHub Exploit DB Packet Storm
280156 - stepweb sws The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to S… NVD-CWE-Other
CVE-2002-0537 2008-09-6 05:28 2002-07-3 Show GitHub Exploit DB Packet Storm
280157 - demarc_security puresecure Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie. NVD-CWE-Other
CVE-2002-0539 2008-09-6 05:28 2002-07-3 Show GitHub Exploit DB Packet Storm
280158 - nortel cvx_1800_multi-service_access_switch Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration. NVD-CWE-Other
CVE-2002-0540 2008-09-6 05:28 2002-07-3 Show GitHub Exploit DB Packet Storm
280159 - ibm tivoli_storage_manager Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (… NVD-CWE-Other
CVE-2002-0541 2008-09-6 05:28 2002-07-3 Show GitHub Exploit DB Packet Storm
280160 - aprelium_technologies abyss_web_server Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (… NVD-CWE-Other
CVE-2002-0543 2008-09-6 05:28 2002-07-3 Show GitHub Exploit DB Packet Storm