Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
186991 2.1 注意 DELL EMC (旧 EMC Corporation) - EMC Smarts Network Configuration Manager における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-4615 2012-11-29 11:35 2012-11-27 Show GitHub Exploit DB Packet Storm
186992 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC Smarts Network Configuration Manager のデフォルト設定における脆弱性 CWE-287
不適切な認証 		CVE-2012-4614 2012-11-29 11:32 2012-11-27 Show GitHub Exploit DB Packet Storm
186993 4.3 警告 DELL EMC (旧 EMC Corporation) - EMC RSA Adaptive Authentication On-Premise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4611 2012-11-29 11:31 2012-11-27 Show GitHub Exploit DB Packet Storm
186994 4.3 警告 ヒューレット・パッカード
サイバートラスト株式会社
レッドハット
Apache Software Foundation
オラクル		 - APR ライブラリおよび Apache HTTP Server の fnmatch 実装におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1928 2012-11-28 15:46 2011-05-24 Show GitHub Exploit DB Packet Storm
186995 5.4 警告 Wireshark - Wireshark の Ixia IxVeriWave ファイルパーサにおける整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2012-4298 2012-11-28 15:37 2012-08-15 Show GitHub Exploit DB Packet Storm
186996 8.3 危険 Wireshark - Wireshark の GSM RLC MAC 解析機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4297 2012-11-28 15:36 2012-08-15 Show GitHub Exploit DB Packet Storm
186997 3.3 注意 Wireshark - Wireshark の RTPS2 解析機能におけるバッファオーバーフローの脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4296 2012-11-28 15:35 2012-08-15 Show GitHub Exploit DB Packet Storm
186998 5.8 警告 Wireshark - Wireshark の ERF 解析機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4294 2012-11-28 15:33 2012-08-15 Show GitHub Exploit DB Packet Storm
186999 3.3 注意 Wireshark - Wireshark の EtherCAT Mailbox 解析機能におけるサービス運用妨害 (アプリケーションの終了) の脆弱性 CWE-189
数値処理の問題 		CVE-2012-4293 2012-11-28 15:32 2012-08-15 Show GitHub Exploit DB Packet Storm
187000 3.3 注意 Wireshark - Wireshark の STUN 解析機能におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4292 2012-11-28 15:32 2012-08-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 - - - Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens on TCP port 3009 by default. New - CVE-2023-46271 2025-02-21 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
172 - - - Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings. New - CVE-2020-35546 2025-02-21 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
173 - - - Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information. New - CVE-2020-13481 2025-02-21 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
174 - - - Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device. New - CVE-2020-10095 2025-02-21 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
175 7.5 HIGH
Network 		enituretechnology ltl_freight_quotes The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insuffi… Update CWE-89
SQL Injection 		CVE-2024-13490 2025-02-21 01:14 2025-02-12 Show GitHub Exploit DB Packet Storm
176 7.5 HIGH
Network 		enituretechnology small_package_quotes The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the… Update CWE-89
SQL Injection 		CVE-2024-13475 2025-02-21 01:10 2025-02-12 Show GitHub Exploit DB Packet Storm
177 8.8 HIGH
Network 		apusthemes superio The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' functio… Update CWE-862
 Missing Authorization 		CVE-2024-12296 2025-02-21 01:09 2025-02-12 Show GitHub Exploit DB Packet Storm
178 9.8 CRITICAL
Network 		apusthemes superio The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the 'role' field when… Update CWE-266
 Incorrect Privilege Assignment 		CVE-2024-12213 2025-02-21 01:08 2025-02-12 Show GitHub Exploit DB Packet Storm
179 - - - Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024… New - CVE-2025-20059 2025-02-21 00:15 2025-02-21 Show GitHub Exploit DB Packet Storm
180 - - - SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function. New - CVE-2024-57401 2025-02-21 00:15 2025-02-21 Show GitHub Exploit DB Packet Storm