Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187521 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5273 2012-10-25 11:44 2012-10-23 Show GitHub Exploit DB Packet Storm
187522 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4176 2012-10-25 11:44 2012-10-23 Show GitHub Exploit DB Packet Storm
187523 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4175 2012-10-25 11:43 2012-10-23 Show GitHub Exploit DB Packet Storm
187524 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4174 2012-10-25 11:42 2012-10-23 Show GitHub Exploit DB Packet Storm
187525 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4173 2012-10-25 11:42 2012-10-23 Show GitHub Exploit DB Packet Storm
187526 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4172 2012-10-25 11:41 2012-10-23 Show GitHub Exploit DB Packet Storm
187527 4.4 警告 GNOME Project - GNOME gnome-keyring における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3466 2012-10-24 16:48 2012-10-22 Show GitHub Exploit DB Packet Storm
187528 2.1 注意 レッドハット - rhncfg の Red Hat Network Configuration Client における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2679 2012-10-24 16:48 2012-10-15 Show GitHub Exploit DB Packet Storm
187529 6.8 警告 razorCMS - RazorCMS の admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1900 2012-10-24 16:47 2012-10-22 Show GitHub Exploit DB Packet Storm
187530 4.3 警告 レッドハット - mod_cluster におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1154 2012-10-24 16:46 2012-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 7.1 HIGH
Network 		- - The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticated attacker to craft a malicious link,… New CWE-601
Open Redirect 		CVE-2025-24868 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
612 6.1 MEDIUM
Network 		- - SAP BusinessObjects Platform (BI Launchpad) does not sufficiently handle user input, resulting in Cross-Site Scripting (XSS) vulnerability. The application allows an unauthenticated attacker to craft… New CWE-79
Cross-site Scripting 		CVE-2025-24867 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
613 5.3 MEDIUM
Network 		- - SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing… New CWE-204
 Response Discrepancy Information Exposure 		CVE-2025-23193 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
614 3.1 LOW
Network 		- - Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the `atom:link` values … New CWE-644
 Improper Neutralization of HTTP Headers for Scripting Syntax 		CVE-2025-23191 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
615 4.3 MEDIUM
Network 		- - Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker c… New CWE-862
 Missing Authorization 		CVE-2025-23190 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
616 4.3 MEDIUM
Network 		- - Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There… New CWE-862
 Missing Authorization 		CVE-2025-23189 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
617 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2024-11890 2025-02-11 10:15 2025-02-11 Show GitHub Exploit DB Packet Storm
618 - - - A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server… New - CVE-2024-8550 2025-02-11 09:15 2025-02-11 Show GitHub Exploit DB Packet Storm
619 - - - A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling of non-ASCII filenames in the multer library. This vulnerability can lead to ar… New - CVE-2024-13059 2025-02-11 09:15 2025-02-11 Show GitHub Exploit DB Packet Storm
620 - - - wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket. This can lead to m… New - CVE-2024-10649 2025-02-11 09:15 2025-02-11 Show GitHub Exploit DB Packet Storm