Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187631 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Fusion Middleware における Advanced UI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3183 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
187632 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirect の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3175 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
187633 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3153 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
187634 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3152 2012-10-19 18:07 2012-10-16 Show GitHub Exploit DB Packet Storm
187635 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Installation の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1686 2012-10-19 18:06 2012-10-16 Show GitHub Exploit DB Packet Storm
187636 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirects の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0518 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
187637 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0108 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
187638 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0107 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
187639 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0106 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
187640 2.1 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0095 2012-10-19 17:41 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 - - - WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_permissao.php` endpoint. This vulnerability could allow an authoriz… New CWE-89
SQL Injection 		CVE-2025-24901 2025-02-4 07:15 2025-02-4 Show GitHub Exploit DB Packet Storm
282 - - - CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the `blocksync` protocol peers send their `base` and `latest` heights when they connect to a ne… New CWE-703
 Improper Check or Handling of Exceptional Conditions 		CVE-2025-24371 2025-02-4 07:15 2025-02-4 Show GitHub Exploit DB Packet Storm
283 - - - Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get a… New CWE-280
Improper Handling of Insufficient Permissions or Privileges  		CVE-2025-24029 2025-02-4 07:15 2025-02-4 Show GitHub Exploit DB Packet Storm
284 - - - phpoffice/phpspreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions have been found to have a Bypass of the Cross-site Scripting (XSS) sanitizer using the java… New CWE-79
Cross-site Scripting 		CVE-2025-23210 2025-02-4 07:15 2025-02-4 Show GitHub Exploit DB Packet Storm
285 - - - Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based env… New CWE-284
Improper Access Control 		CVE-2024-35177 2025-02-4 07:15 2025-02-4 Show GitHub Exploit DB Packet Storm
286 - - - reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmap_cmd parameters. This issue has been addressed in commit `c28e5c8d` … New CWE-74
Injection 		CVE-2025-24962 2025-02-4 06:15 2025-02-4 Show GitHub Exploit DB Packet Storm
287 - - - org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addres… New CWE-22
Path Traversal 		CVE-2025-24961 2025-02-4 06:15 2025-02-4 Show GitHub Exploit DB Packet Storm
288 - - - Jellystat is a free and open source Statistics App for Jellyfin. In affected versions Jellystat is directly using a user input in the route(s). This can lead to Path Traversal Vulnerabilities. Since … New CWE-22
Path Traversal 		CVE-2025-24960 2025-02-4 06:15 2025-02-4 Show GitHub Exploit DB Packet Storm
289 - - - reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovered in reNgine, where **an insider attacker with any role** (such as Auditor, Penetration Tester, or … New CWE-200
Information Exposure 		CVE-2025-24899 2025-02-4 06:15 2025-02-4 Show GitHub Exploit DB Packet Storm
290 - - - zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.env`. This can lead to arbitrary command e… New CWE-94
Code Injection 		CVE-2025-24959 2025-02-4 06:15 2025-02-4 Show GitHub Exploit DB Packet Storm