Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187271 5 警告 Best Practical Solutions - Request Tracker における任意のファイルを作成される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4884 2012-11-13 16:13 2012-10-25 Show GitHub Exploit DB Packet Storm
187272 5 警告 Best Practical Solutions - Request Tracker におけるクロスサイトリクエストフォージェリ (CSRF) 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4734 2012-11-13 16:12 2012-10-25 Show GitHub Exploit DB Packet Storm
187273 6.8 警告 Best Practical Solutions - Request Tracker におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4732 2012-11-13 16:11 2012-10-25 Show GitHub Exploit DB Packet Storm
187274 4 警告 Best Practical Solutions - Request Tracker 用 FAQ マネージャにおける任意のクラスの任意の記事を作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4731 2012-11-13 16:10 2012-10-25 Show GitHub Exploit DB Packet Storm
187275 3.5 注意 Best Practical Solutions - Request Tracker における任意のメールヘッダを挿入される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4730 2012-11-13 16:08 2012-10-25 Show GitHub Exploit DB Packet Storm
187276 5 警告 Drupal - Drupal の OpenID モジュールおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4554 2012-11-13 15:59 2012-10-17 Show GitHub Exploit DB Packet Storm
187277 6.8 警告 Drupal - Drupal における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4553 2012-11-13 15:58 2012-10-17 Show GitHub Exploit DB Packet Storm
187278 7.5 危険 Quagga
インターネットイニシアティブ		 - Quagga の ecommunity_ecom2str 関数におけるにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3327 2012-11-13 15:11 2011-09-26 Show GitHub Exploit DB Packet Storm
187279 5 警告 Quagga
インターネットイニシアティブ		 - Quagga の ospf_flood 関数におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3326 2012-11-13 15:10 2011-09-26 Show GitHub Exploit DB Packet Storm
187280 5 警告 Quagga
インターネットイニシアティブ		 - Quagga の ospfd 内の ospf_packet.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3325 2012-11-13 15:09 2011-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 7.5 HIGH
Network 		dell data_domain_operating_system Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability. A remote attacker could potential… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2025-22475 2025-02-8 05:42 2025-02-4 Show GitHub Exploit DB Packet Storm
352 7.8 HIGH
Local 		dell data_domain_operating_system Dell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vu… NVD-CWE-Other
CVE-2024-53295 2025-02-8 05:29 2025-02-1 Show GitHub Exploit DB Packet Storm
353 - - - vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere wit… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2025-25183 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
354 - - - An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to access the import / export fun… - CVE-2021-41528 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
355 - - - An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. The vulnerability requires that the 2FA … - CVE-2021-41527 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
356 - - - Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release. - CVE-2021-27017 2025-02-8 05:15 2025-02-8 Show GitHub Exploit DB Packet Storm
357 7.1 HIGH
Local 		dell data_domain_operating_system Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially exploit this vulnerability to gain unaut… CWE-22
Path Traversal 		CVE-2024-51534 2025-02-8 04:58 2025-02-1 Show GitHub Exploit DB Packet Storm
358 4.9 MEDIUM
Network 		dell data_domain_operating_system Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high privileged attacker with remote access could potentially expl… CWE-787
 Out-of-bounds Write 		CVE-2024-53296 2025-02-8 04:54 2025-02-1 Show GitHub Exploit DB Packet Storm
359 5.4 MEDIUM
Network 		- - A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads… CWE-22
Path Traversal 		CVE-2025-1106 2025-02-8 04:15 2025-02-8 Show GitHub Exploit DB Packet Storm
360 - - - Tiny File Manager v2.4.7 and below is vulnerable to session fixation. - CVE-2022-40916 2025-02-8 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm