Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1751 7.8 重要
Local 		クアルコム APQ8030 ファームウェア
APQ8064 ファームウェア
9206 lte modem ファームウェア
c-v2x 9150 ファームウェア
9207 lte modem ファームウェア
CSRA6640 ファームウェア
APQ8037 … 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-787
CWE-823
CVE-2023-33066 2025-01-16 15:43 2023-05-17 Show GitHub Exploit DB Packet Storm
1752 7.8 重要
Local 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2025 		Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用 		CVE-2025-21335 2025-01-16 15:43 2025-01-14 Show GitHub Exploit DB Packet Storm
1753 7.3 重要
Local 		マイクロソフト Azure Data Studio Azure Data Studio の特権の昇格の脆弱性 CWE-284
CWE-noinfo
CVE-2024-26203 2025-01-16 15:38 2024-03-12 Show GitHub Exploit DB Packet Storm
1754 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-209
CWE-noinfo
CVE-2024-28939 2025-01-16 15:34 2024-04-9 Show GitHub Exploit DB Packet Storm
1755 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-29044 2025-01-16 15:31 2024-04-9 Show GitHub Exploit DB Packet Storm
1756 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-53204 2025-01-16 15:25 2024-11-4 Show GitHub Exploit DB Packet Storm
1757 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2024-26709 2025-01-16 15:23 2024-02-14 Show GitHub Exploit DB Packet Storm
1758 4.7 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2023-52505 2025-01-16 15:20 2023-10-6 Show GitHub Exploit DB Packet Storm
1759 7.1 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2023-52501 2025-01-16 15:17 2023-09-8 Show GitHub Exploit DB Packet Storm
1760 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2023-52500 2025-01-16 15:14 2023-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277711 - debian python-dns PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a di… CWE-16
Configuration 		CVE-2008-4099 2008-09-19 13:00 2008-09-19 Show GitHub Exploit DB Packet Storm
277712 - debian python-dns PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote a… CWE-16
Configuration 		CVE-2008-4126 2008-09-19 13:00 2008-09-19 Show GitHub Exploit DB Packet Storm
277713 - lxde lightweight_x11_desktop_environment src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file. CWE-59
Link Following 		CVE-2008-3791 2008-09-17 14:35 2008-09-3 Show GitHub Exploit DB Packet Storm
277714 - apple iphone Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-3876 2008-09-17 14:35 2008-09-2 Show GitHub Exploit DB Packet Storm
277715 - six_apart movable_type Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Soluti… CWE-79
Cross-site Scripting 		CVE-2008-4079 2008-09-16 00:14 2008-09-16 Show GitHub Exploit DB Packet Storm
277716 - texmedia million_pixel_script SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary SQL commands via the id_cat parameter. CWE-89
SQL Injection 		CVE-2008-4055 2008-09-12 13:00 2008-09-12 Show GitHub Exploit DB Packet Storm
277717 - apple itunes Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow re… CWE-200
Information Exposure 		CVE-2008-3634 2008-09-11 13:00 2008-09-11 Show GitHub Exploit DB Packet Storm
277718 - opensuse opensuse Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors. NOTE: the vendor states that these "can be considered no security problem." NVD-CWE-noinfo
CWE-189
Numeric Errors 		CVE-2008-2388 2008-09-11 10:10 2008-06-7 Show GitHub Exploit DB Packet Storm
277719 - opensuse opensuse opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack. CWE-59
Link Following 		CVE-2008-2389 2008-09-11 10:10 2008-06-7 Show GitHub Exploit DB Packet Storm
277720 - xine xine-lib Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-0238 2008-09-11 10:04 2008-01-12 Show GitHub Exploit DB Packet Storm