Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
187071 5 警告 ViewVC - ViewVC の SVN のリビジョン表示における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3357 2012-11-26 17:03 2012-06-15 Show GitHub Exploit DB Packet Storm
187072 5 警告 ViewVC - ViewVC のリモート SVN ビュー機能におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-3356 2012-11-26 17:02 2012-06-22 Show GitHub Exploit DB Packet Storm
187073 5 警告 fribidi - PyFriBidi の fribidi_utf8_to_unicode 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1176 2012-11-26 17:01 2012-08-26 Show GitHub Exploit DB Packet Storm
187074 6.8 警告 Irfan Skiljan - IrfanView PlugIns の JPEG2000 プラグインにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0897 2012-11-26 16:59 2012-01-20 Show GitHub Exploit DB Packet Storm
187075 4.3 警告 Andreas Gohr - DokuWiki の inc/template.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0283 2012-11-26 16:46 2012-07-13 Show GitHub Exploit DB Packet Storm
187076 10 危険 Sinapsi - 複数の Sinapsi 製品の管理 Web ページにおける管理者のアクセス権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5864 2012-11-26 15:47 2012-11-19 Show GitHub Exploit DB Packet Storm
187077 10 危険 Sinapsi - 複数の Sinapsi 製品の ping.php における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5863 2012-11-26 15:46 2012-11-19 Show GitHub Exploit DB Packet Storm
187078 10 危険 Sinapsi - 複数の Sinapsi 製品の login.php における管理者のアクセス権限を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-5862 2012-11-26 15:45 2012-11-19 Show GitHub Exploit DB Packet Storm
187079 7.5 危険 Sinapsi - 複数の Sinapsi 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5861 2012-11-26 15:42 2012-11-19 Show GitHub Exploit DB Packet Storm
187080 9 危険 IBM - IBM WebSphere DataPower XC10 アプライアンスにおける管理ロールの要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5759 2012-11-26 15:42 2012-10-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 6.1 MEDIUM
Network
paessler prtg_network_monitor Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of… Update CWE-79
Cross-site Scripting
CVE-2024-12833 2025-02-19 06:39 2025-02-12 Show GitHub Exploit DB Packet Storm
282 9.8 CRITICAL
Network
logsign unified_secops_platform Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. … Update NVD-CWE-noinfo
CVE-2025-1044 2025-02-19 06:34 2025-02-12 Show GitHub Exploit DB Packet Storm
283 8.8 HIGH
Network
mintty_project mintty Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. Us… Update CWE-787
 Out-of-bounds Write
CVE-2025-1052 2025-02-19 06:32 2025-02-12 Show GitHub Exploit DB Packet Storm
284 4.3 MEDIUM
Network
majesticsupport majestic_support The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the … Update CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-13601 2025-02-19 06:31 2025-02-12 Show GitHub Exploit DB Packet Storm
285 8.8 HIGH
Network
lcweb global_gallery The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allo… Update CWE-94
Code Injection
CVE-2024-13814 2025-02-19 06:30 2025-02-12 Show GitHub Exploit DB Packet Storm
286 7.8 HIGH
Local
code-projects police_fir_record_management_system A vulnerability classified as critical was found in code-projects Police FIR Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Delete Record Ha… Update CWE-787
 Out-of-bounds Write
CVE-2025-1187 2025-02-19 06:28 2025-02-12 Show GitHub Exploit DB Packet Storm
287 - - - WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `historico_paciente.php` endpoin… New CWE-89
CWE-284
SQL Injection
Improper Access Control
CVE-2025-26617 2025-02-19 06:15 2025-02-19 Show GitHub Exploit DB Packet Storm
288 - - - WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `exportar_dump.php` endpoint. T… New CWE-22
CWE-284
Path Traversal
Improper Access Control
CVE-2025-26616 2025-02-19 06:15 2025-02-19 Show GitHub Exploit DB Packet Storm
289 - - - WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `examples.php` endpoint. This v… New CWE-22
CWE-284
Path Traversal
Improper Access Control
CVE-2025-26615 2025-02-19 06:15 2025-02-19 Show GitHub Exploit DB Packet Storm
290 - - - WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_documento.php` endpoint… New CWE-89
SQL Injection
CVE-2025-26614 2025-02-19 06:15 2025-02-19 Show GitHub Exploit DB Packet Storm