Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187961 7.5 危険 PostgreSQL.org - PostgreSQL JDBC ドライバにおける SQL インジェクション攻撃の脆弱性 CWE-DesignError
CVE-2012-1618 2012-10-9 16:47 2012-10-6 Show GitHub Exploit DB Packet Storm
187962 5 警告 Cerberus, LLC - Cerberus FTP Server のデフォルト設定における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-5301 2012-10-9 16:40 2012-06-15 Show GitHub Exploit DB Packet Storm
187963 4.3 警告 Hans Nilsson - Drupal 用 Video Filter モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1634 2012-10-9 16:25 2012-01-11 Show GitHub Exploit DB Packet Storm
187964 3.5 注意 Lingotek - Drupal 用 Lingotek モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1624 2012-10-9 16:19 2012-01-4 Show GitHub Exploit DB Packet Storm
187965 5 警告 Aidan Lister - Drupal 用 Registration Codes モジュールにおける登録制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1623 2012-10-9 16:16 2012-01-4 Show GitHub Exploit DB Packet Storm
187966 7.5 危険 eZ - ez Publish における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1565 2012-10-9 16:10 2012-10-6 Show GitHub Exploit DB Packet Storm
187967 4.3 警告 Yuriy V Semenikhin - YVS Image Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1564 2012-10-9 15:57 2012-10-6 Show GitHub Exploit DB Packet Storm
187968 5 警告 VMware - VMware CapacityIQ におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5051 2012-10-9 15:54 2012-10-4 Show GitHub Exploit DB Packet Storm
187969 4.3 警告 VMware - VMware vCenter Operations のサーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5050 2012-10-9 15:47 2012-10-4 Show GitHub Exploit DB Packet Storm
187970 6.9 警告 VMware - VMware Movie Decoder のインストーラにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-4897 2012-10-9 15:40 2012-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RTO GmbH Dynamic Conditions allows Stored XSS. This issue affects Dynamic Conditions: from n/a th… New CWE-79
Cross-site Scripting 		CVE-2025-22642 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
192 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prem Tiwari FM Notification Bar allows Stored XSS. This issue affects FM Notification Bar: from n… New CWE-79
Cross-site Scripting 		CVE-2025-22641 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
193 - - - A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in th… New - CVE-2025-22206 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
194 - - - cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead… New - CVE-2025-0825 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
195 - - - The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative func… New - CVE-2024-9644 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
196 - - - The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as ro… New - CVE-2024-23690 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
197 - - - Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies. This allows for the use of administrator functions, resulting in the leakage of sensitive user inform… New - CVE-2025-22918 2025-02-5 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
198 - - - A Cross-Site Request Forgery (CSRF) in Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to execute arbitrary operations via supplying a crafted HTTP request. New - CVE-2024-56903 2025-02-5 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
199 - - - An issue in Geovision GV-ASWeb with version 6.1.0.0 or less allows unauthorized attackers with low-level privileges to be able to request information about other accounts via a crafted HTTP request. New - CVE-2024-56902 2025-02-5 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
200 - - - Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t… New - CVE-2025-1020 2025-02-4 23:15 2025-02-4 Show GitHub Exploit DB Packet Storm