Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187841 4.3 警告 シーメンス - Siemens SIMATIC S7-1200 PLC 上の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3040 2012-10-15 14:34 2012-10-8 Show GitHub Exploit DB Packet Storm
187842 3.3 注意 bryce_harrington - xdiagnose における任意のファイルを上書される脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-5355 2012-10-15 14:29 2012-10-10 Show GitHub Exploit DB Packet Storm
187843 2.1 注意 WellinTech - WellinTech KingView における証明書情報を発見される脆弱性 CWE-310
暗号の問題 		CVE-2012-4899 2012-10-15 14:24 2012-10-9 Show GitHub Exploit DB Packet Storm
187844 10 危険 Google - Google Chrome のプロセス間通信の実装におけるサンドボックスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5376 2012-10-15 14:24 2012-10-10 Show GitHub Exploit DB Packet Storm
187845 6.5 警告 Lars Hjemli - cgit の parsing.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4465 2012-10-15 14:13 2012-04-23 Show GitHub Exploit DB Packet Storm
187846 5.1 警告 Midnight Commander - Midnight Commander (mc) における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4463 2012-10-15 14:08 2012-10-3 Show GitHub Exploit DB Packet Storm
187847 6.6 警告 Linux - Linux Kernel の net/socket.c における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4467 2012-10-15 14:02 2012-09-14 Show GitHub Exploit DB Packet Storm
187848 2.9 注意 DELL EMC (旧 EMC Corporation) - EMC RSA Adaptive Authentication On-Premise における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-2286 2012-10-15 14:01 2012-10-10 Show GitHub Exploit DB Packet Storm
187849 6.2 警告 openCryptoki Project - openCryptoki における任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-4455 2012-10-15 13:55 2012-04-27 Show GitHub Exploit DB Packet Storm
187850 2.9 注意 openCryptoki Project - openCryptoki における任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4454 2012-10-15 13:51 2012-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport() memory leak As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLI… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2025-21683 2025-02-4 05:01 2025-01-31 Show GitHub Exploit DB Packet Storm
312 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomap_write_delalloc_scan() was inadvertently using a 3… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-21667 2025-02-4 05:00 2025-01-31 Show GitHub Exploit DB Packet Storm
313 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() w… Update CWE-476
 NULL Pointer Dereference 		CVE-2025-21666 2025-02-4 04:59 2025-01-31 Show GitHub Exploit DB Packet Storm
314 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a 64-bi… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-21665 2025-02-4 04:57 2025-01-31 Show GitHub Exploit DB Packet Storm
315 - - - Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/proc_get endpoint. The vulnerability allows an attacker to manipulate SQL queries by injecting malicio… New - CVE-2024-57238 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
316 - - - Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the /reqproc/proc_get endpoint. The vulnerability arises because the cmd parameter does not properly sani… New - CVE-2024-57237 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
317 - - - Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiti… New - CVE-2024-57004 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
318 - - - EasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0 are vulnerable to Incorrect Access Control. This vulnerability allows the api to be used to create/modify/delete information about aliases (users) / user… Update - CVE-2024-53355 2025-02-4 04:15 2025-02-1 Show GitHub Exploit DB Packet Storm
319 - - - Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial. Update - CVE-2024-57510 2025-02-4 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
320 - - - The specific component in Celk Saude 3.1.252.1 that processes user input and returns error messages to the client is vulnerable due to improper validation or sanitization of the "erro" parameter. Thi… Update - CVE-2024-48761 2025-02-4 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm