Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187231 5.8 警告 OpenStack - OpenStack Dashboard の views/auth_forms.py におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3540 2012-11-15 14:27 2012-08-30 Show GitHub Exploit DB Packet Storm
187232 4.3 警告 TYPO3 Association - TYPO3 のインストールツールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3531 2012-11-15 14:26 2012-08-15 Show GitHub Exploit DB Packet Storm
187233 4.3 警告 TYPO3 Association - TYPO3 の t3lib_div::quoteJSvalue API 関数におけるクロスサイトスクリプティングの脆弱性 CWE-Other
その他 		CVE-2012-3530 2012-11-15 14:25 2012-08-15 Show GitHub Exploit DB Packet Storm
187234 3.5 注意 TYPO3 Association - TYPO3 のバックエンドの configuration モジュールにおける暗号鍵を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3529 2012-11-15 14:24 2012-08-15 Show GitHub Exploit DB Packet Storm
187235 4 警告 TYPO3 Association - TYPO3 のバックエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3528 2012-11-15 14:23 2012-08-15 Show GitHub Exploit DB Packet Storm
187236 4.6 警告 TYPO3 Association - TYPO3 のバックエンドのヘルプシステムにおける任意のオブジェクトのシリアル化を解除される脆弱性 CWE-310
暗号の問題 		CVE-2012-3527 2012-11-15 14:22 2012-08-15 Show GitHub Exploit DB Packet Storm
187237 7.5 危険 Zabbix - Zabbix の frontends/php/popup_bitem.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3435 2012-11-15 12:09 2012-07-18 Show GitHub Exploit DB Packet Storm
187238 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5287 2012-11-14 16:07 2012-11-2 Show GitHub Exploit DB Packet Storm
187239 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5286 2012-11-14 16:07 2012-11-2 Show GitHub Exploit DB Packet Storm
187240 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5673 2012-11-14 16:07 2012-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominator defaults to 1 [WHAT & HOW] Variables, used as denominators and maybe not assigned to othe… New - CVE-2024-57950 2025-02-11 01:15 2025-02-11 Show GitHub Exploit DB Packet Storm
302 5.3 MEDIUM
Network 		- - A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, lea… New CWE-407
 Inefficient Algorithmic Complexity 		CVE-2024-12243 2025-02-11 01:15 2025-02-11 Show GitHub Exploit DB Packet Storm
303 5.3 MEDIUM
Network 		- - A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down… New CWE-407
 Inefficient Algorithmic Complexity 		CVE-2024-12133 2025-02-11 01:15 2025-02-11 Show GitHub Exploit DB Packet Storm
304 - - - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Assign job pointer to NULL before signaling the fence In commit e4b5ccd392b9 ("drm/v3d: Ensure job pointer is set to NUL… New - CVE-2025-21688 2025-02-11 01:15 2025-02-11 Show GitHub Exploit DB Packet Storm
305 5.4 MEDIUM
Network 		- - A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object type… New CWE-79
Cross-site Scripting 		CVE-2024-11831 2025-02-11 01:15 2025-02-11 Show GitHub Exploit DB Packet Storm
306 - - - Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack. … New - CVE-2024-11621 2025-02-11 01:15 2025-02-10 Show GitHub Exploit DB Packet Storm
307 - - - Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b have a Hardcoded password vulne… Update - CVE-2024-36556 2025-02-11 01:15 2025-02-7 Show GitHub Exploit DB Packet Storm
308 - - - Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack. Update - CVE-2024-36553 2025-02-11 01:15 2025-02-7 Show GitHub Exploit DB Packet Storm
309 3.1 LOW
Network 		- - A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to… New CWE-404
CWE-401
 Improper Resource Shutdown or Release
 Missing Release of Memory after Effective Lifetime 		CVE-2025-1149 2025-02-11 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm
310 - - - A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used.  An attacker who successfully exploited the vulnerability could, in the worst cas… New CWE-256
Plaintext Storage of a Password  		CVE-2024-10334 2025-02-11 00:15 2025-02-11 Show GitHub Exploit DB Packet Storm