Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1701 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-4587 2025-01-16 17:12 2024-05-7 Show GitHub Exploit DB Packet Storm
1702 7.1 重要
Local
Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2024-36935 2025-01-16 17:12 2024-04-25 Show GitHub Exploit DB Packet Storm
1703 9.8 緊急
Network
IBM IBM Cognos Controller IBM の IBM Cognos Controller における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2023-38724 2025-01-16 17:12 2023-07-25 Show GitHub Exploit DB Packet Storm
1704 8.8 重要
Network
IBM IBM Security Guardium IBM の IBM Security Guardium における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2023-47709 2025-01-16 17:12 2023-11-9 Show GitHub Exploit DB Packet Storm
1705 5.9 警告
Network
Huawei HarmonyOS Huawei の HarmonyOS における競合状態に関する脆弱性 CWE-362
CWE-362
CVE-2024-54102 2025-01-16 17:12 2024-12-12 Show GitHub Exploit DB Packet Storm
1706 7.5 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-121
CWE-noinfo
CVE-2024-29045 2025-01-16 17:09 2024-04-9 Show GitHub Exploit DB Packet Storm
1707 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-190
CWE-noinfo
CVE-2024-28942 2025-01-16 17:05 2024-04-9 Show GitHub Exploit DB Packet Storm
1708 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-29048 2025-01-16 17:02 2024-04-9 Show GitHub Exploit DB Packet Storm
1709 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-29983 2025-01-16 17:00 2024-04-9 Show GitHub Exploit DB Packet Storm
1710 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-29985 2025-01-16 16:58 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276151 - sun java_system_directory_server Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SO_KEEPALIVE socket option, which makes it easier for remote attackers to cau… NVD-CWE-Other
CVE-2009-4441 2010-06-14 04:15 2009-12-29 Show GitHub Exploit DB Packet Storm
276152 - sun java_system_directory_server Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote… CWE-16
Configuration
CVE-2009-4442 2010-06-14 04:15 2009-12-29 Show GitHub Exploit DB Packet Storm
276153 - sun java_system_directory_server Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote a… NVD-CWE-noinfo
CVE-2009-4443 2010-06-14 04:15 2009-12-29 Show GitHub Exploit DB Packet Storm
276154 - zonecheck zonecheck Cross-site scripting (XSS) vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi. CWE-79
Cross-site Scripting
CVE-2009-4882 2010-06-14 04:15 2010-06-3 Show GitHub Exploit DB Packet Storm
276155 - stardict stardict stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network. CWE-200
Information Exposure
CVE-2009-2260 2010-06-14 04:11 2009-06-30 Show GitHub Exploit DB Packet Storm
276156 - sun java_web_console
solaris
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbit… CWE-79
Cross-site Scripting
CVE-2009-2283 2010-06-14 04:11 2009-07-1 Show GitHub Exploit DB Packet Storm
276157 - ibm db2_content_manager Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Con… NVD-CWE-noinfo
CVE-2010-1041 2010-06-11 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
276158 - focusdev com_mv_restaurantmenumanager SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to e… CWE-89
SQL Injection
CVE-2010-1468 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
276159 - ternaria com_jprojectmanager Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspec… CWE-22
Path Traversal
CVE-2010-1469 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
276160 - dev.pucit.edu.pk com_webtv Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in … CWE-22
Path Traversal
CVE-2010-1470 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm