Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1751 7.8 重要
Local 		クアルコム APQ8030 ファームウェア
APQ8064 ファームウェア
9206 lte modem ファームウェア
c-v2x 9150 ファームウェア
9207 lte modem ファームウェア
CSRA6640 ファームウェア
APQ8037 … 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-787
CWE-823
CVE-2023-33066 2025-01-16 15:43 2023-05-17 Show GitHub Exploit DB Packet Storm
1752 7.8 重要
Local 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2025 		Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用 		CVE-2025-21335 2025-01-16 15:43 2025-01-14 Show GitHub Exploit DB Packet Storm
1753 7.3 重要
Local 		マイクロソフト Azure Data Studio Azure Data Studio の特権の昇格の脆弱性 CWE-284
CWE-noinfo
CVE-2024-26203 2025-01-16 15:38 2024-03-12 Show GitHub Exploit DB Packet Storm
1754 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-209
CWE-noinfo
CVE-2024-28939 2025-01-16 15:34 2024-04-9 Show GitHub Exploit DB Packet Storm
1755 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-29044 2025-01-16 15:31 2024-04-9 Show GitHub Exploit DB Packet Storm
1756 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-53204 2025-01-16 15:25 2024-11-4 Show GitHub Exploit DB Packet Storm
1757 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2024-26709 2025-01-16 15:23 2024-02-14 Show GitHub Exploit DB Packet Storm
1758 4.7 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2023-52505 2025-01-16 15:20 2023-10-6 Show GitHub Exploit DB Packet Storm
1759 7.1 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2023-52501 2025-01-16 15:17 2023-09-8 Show GitHub Exploit DB Packet Storm
1760 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2023-52500 2025-01-16 15:14 2023-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280871 - black_tie_project black_tie_project categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathna… NVD-CWE-Other
CVE-2002-0446 2008-09-6 05:28 2002-07-26 Show GitHub Exploit DB Packet Storm
280872 - xerver xerver Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request. NVD-CWE-Other
CVE-2002-0447 2008-09-6 05:28 2002-07-26 Show GitHub Exploit DB Packet Storm
280873 - xerver xerver Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences. NVD-CWE-Other
CVE-2002-0448 2008-09-6 05:28 2002-07-26 Show GitHub Exploit DB Packet Storm
280874 - phpprojekt phpprojekt filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter. NVD-CWE-Other
CVE-2002-0451 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280875 - foundrynet serveriron Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than inten… NVD-CWE-Other
CVE-2002-0452 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280876 - oblix netpoint The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password… NVD-CWE-Other
CVE-2002-0453 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280877 - qualcomm qpopper Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop. NVD-CWE-Other
CVE-2002-0454 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280878 - incredimail incredimail IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from d… NVD-CWE-Other
CVE-2002-0455 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280879 - bg_guestbook bg_guestbook Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as <, >, and & in fields such as (1) n… NVD-CWE-Other
CVE-2002-0457 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280880 - linux-sottises news-tnk Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter. NVD-CWE-Other
CVE-2002-0458 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm