Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
186941 3.5 注意 Christian Johansson - Drupal 用 Restrict node page view モジュールにおける未公開のノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4473 2012-12-4 16:21 2012-07-11 Show GitHub Exploit DB Packet Storm
186942 5.1 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおける任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2012-4472 2012-12-4 16:20 2012-07-11 Show GitHub Exploit DB Packet Storm
186943 5 警告 Dominique CLAUSE - Drupal 用 Search Autocomplete モジュールにおけるオートコンプリートを無効される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4471 2012-12-4 16:19 2012-07-11 Show GitHub Exploit DB Packet Storm
186944 7.5 危険 Philip Ludlam - Drupal 用 Listhandler モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4470 2012-12-4 16:13 2012-07-11 Show GitHub Exploit DB Packet Storm
186945 2.6 注意 Simon Rycroft - Drupal 用 Hashcash モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4469 2012-12-4 15:17 2012-06-21 Show GitHub Exploit DB Packet Storm
186946 4.3 警告 Privatemsg Project - Drupal 用 Privatemsg モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4468 2012-12-4 15:16 2012-06-20 Show GitHub Exploit DB Packet Storm
186947 2.1 注意 Python Software Foundation - Python Keyring におけるパスワードを取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-4571 2012-12-4 14:30 2012-11-20 Show GitHub Exploit DB Packet Storm
186948 7.5 危険 libssh - libssh におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4560 2012-12-4 14:27 2012-11-20 Show GitHub Exploit DB Packet Storm
186949 7.5 危険 PS Project Management Team - libunity-webapps におけるサービス運用妨害 (メモリ破損およびクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4551 2012-12-4 14:25 2012-11-28 Show GitHub Exploit DB Packet Storm
186950 5 警告 IBM - IBM WebSphere Portal の theme コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-4834 2012-12-4 14:12 2012-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 - - - Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users. - CVE-2024-54961 2025-02-21 05:15 2025-02-21 Show GitHub Exploit DB Packet Storm
362 - - - A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component. - CVE-2024-54960 2025-02-21 05:15 2025-02-21 Show GitHub Exploit DB Packet Storm
363 - - - PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters. - CVE-2023-51335 2025-02-21 05:15 2025-02-21 Show GitHub Exploit DB Packet Storm
364 - - - A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible De… - CVE-2023-51334 2025-02-21 05:15 2025-02-21 Show GitHub Exploit DB Packet Storm
365 - - - WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerabil… CWE-89
SQL Injection 		CVE-2025-27096 2025-02-21 04:15 2025-02-21 Show GitHub Exploit DB Packet Storm
366 - - - Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw. - CVE-2024-7141 2025-02-21 04:15 2025-02-21 Show GitHub Exploit DB Packet Storm
367 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2025-1258 2025-02-21 03:15 2025-02-21 Show GitHub Exploit DB Packet Storm
368 - - - OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker… CWE-122
Heap-based Buffer Overflow 		CVE-2025-27091 2025-02-21 03:15 2025-02-21 Show GitHub Exploit DB Packet Storm
369 - - - An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05.0014. Some BullSequana XH products were shipped without proper hardware programming, leading to a potenti… - CVE-2024-46933 2025-02-21 03:15 2025-02-21 Show GitHub Exploit DB Packet Storm
370 - - - A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file. - CVE-2025-26308 2025-02-21 02:15 2025-02-21 Show GitHub Exploit DB Packet Storm