Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187381 5.8 警告 PayPal - PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5790 2012-11-7 14:45 2012-11-4 Show GitHub Exploit DB Packet Storm
187382 5.8 警告 PayPal - PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5789 2012-11-7 14:44 2012-11-4 Show GitHub Exploit DB Packet Storm
187383 5.8 警告 PayPal - PayPal IPN ユーティリティにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5788 2012-11-7 14:30 2012-11-4 Show GitHub Exploit DB Packet Storm
187384 5.8 警告 PayPal - PayPal merchant SDK における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5787 2012-11-7 14:29 2012-11-4 Show GitHub Exploit DB Packet Storm
187385 5.8 警告 Apache Software Foundation - Apache CXF における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5786 2012-11-7 14:28 2012-11-4 Show GitHub Exploit DB Packet Storm
187386 5.8 警告 Apache Software Foundation - Apache Axis2/Java における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5785 2012-11-7 14:28 2012-11-4 Show GitHub Exploit DB Packet Storm
187387 5.8 警告 Amazon.com, Inc. - Amazon Flexible Payments Service PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5782 2012-11-7 14:25 2012-11-4 Show GitHub Exploit DB Packet Storm
187388 5.8 警告 Amazon.com, Inc. - Amazon Elastic Load Balancing API Tools における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5781 2012-11-7 14:24 2012-11-4 Show GitHub Exploit DB Packet Storm
187389 5.8 警告 Amazon.com, Inc. - Amazon merchant SDK における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5780 2012-11-7 14:22 2012-11-4 Show GitHub Exploit DB Packet Storm
187390 5.8 警告 Apache Software Foundation - Apache Libcloud における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3446 2012-11-7 14:21 2012-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
641 - - - Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection. - CVE-2024-57241 2025-02-18 23:15 2025-02-12 Show GitHub Exploit DB Packet Storm
642 - - - Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_… - CVE-2024-12797 2025-02-18 23:15 2025-02-12 Show GitHub Exploit DB Packet Storm
643 - - - PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to none (the default value), then pam_pkcs11 will only check i… - CVE-2025-24032 2025-02-18 23:15 2025-02-11 Show GitHub Exploit DB Packet Storm
644 5.7 MEDIUM
Adjacent 		- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls.This issue affects K… CWE-22
Path Traversal 		CVE-2025-1035 2025-02-18 21:15 2025-02-18 Show GitHub Exploit DB Packet Storm
645 - - - Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as th… - CVE-2025-0425 2025-02-18 17:15 2025-02-18 Show GitHub Exploit DB Packet Storm
646 - - - In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting vulnerabilities. An authenticated attacker is able … - CVE-2025-0424 2025-02-18 17:15 2025-02-18 Show GitHub Exploit DB Packet Storm
647 - - - In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple unauthenticated stored cross-site scripting vulnerabilities. An unauthenticated attacker is a… - CVE-2025-0423 2025-02-18 17:15 2025-02-18 Show GitHub Exploit DB Packet Storm
648 - - - An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application. (Remote Code Execution) For this, the user must be able to create "S… - CVE-2025-0422 2025-02-18 17:15 2025-02-18 Show GitHub Exploit DB Packet Storm
649 - - - Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affect… - CVE-2024-57964 2025-02-18 16:15 2025-02-18 Show GitHub Exploit DB Packet Storm
650 - - - Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affecte… - CVE-2024-57963 2025-02-18 16:15 2025-02-18 Show GitHub Exploit DB Packet Storm