Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1871 5.4 警告
Network 		Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-6495 2025-01-16 11:26 2024-07-12 Show GitHub Exploit DB Packet Storm
1872 7.8 重要
Local 		クアルコム qfw7124 ファームウェア
AR8035 ファームウェア
qamsrv1h ファームウェア
SA6145P ファームウェア
qcn6274 ファームウェア
qcn6224 ファームウェア
qamsrv1m ファームウェア
QCA6584AU ファームウェア
QCA8… 		複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2023-43525 2025-01-16 11:16 2023-09-19 Show GitHub Exploit DB Packet Storm
1873 4.3 警告
Network 		Basixonline NEX-Forms Basixonline の WordPress 用 NEX-Forms における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-0907 2025-01-16 11:16 2024-02-29 Show GitHub Exploit DB Packet Storm
1874 6.5 警告
Network 		servit affiliate-toolkit servit の WordPress 用 affiliate-toolkit における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1851 2025-01-16 11:16 2024-03-8 Show GitHub Exploit DB Packet Storm
1875 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. fh1203 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の fh1203 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2988 2025-01-16 11:16 2024-03-27 Show GitHub Exploit DB Packet Storm
1876 8.8 重要
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3148 2025-01-16 11:16 2024-04-2 Show GitHub Exploit DB Packet Storm
1877 7.8 重要
Local 		Rockwell Automation Arena Rockwell Automation の Arena における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-12175 2025-01-16 10:40 2024-12-19 Show GitHub Exploit DB Packet Storm
1878 5.4 警告
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Window… 		Windows Mark Of The Web セキュリティ機能のバイパスの脆弱性 CWE-693
CWE-noinfo
CVE-2024-30050 2025-01-15 18:15 2024-05-14 Show GitHub Exploit DB Packet Storm
1879 4.1 警告
Network 		マイクロソフト Microsoft Dynamics 365 Customer Insights Dynamics 365 Customer Insights のなりすましの脆弱性 CWE-79
CWE-79
CVE-2024-30048 2025-01-15 18:03 2024-05-14 Show GitHub Exploit DB Packet Storm
1880 5.5 警告
Local 		マイクロソフト Azure Identity Library .NET 用 Azure Identity ライブラリの情報漏えいの脆弱性 CWE-522
CWE-noinfo
CVE-2024-29992 2025-01-15 17:54 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278451 - i-soft quikstore Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter. NVD-CWE-Other
CVE-2000-1188 2008-09-11 04:06 2001-01-9 Show GitHub Exploit DB Packet Storm
278452 - btt_software snmp_trap_watcher Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap. NVD-CWE-Other
CVE-2000-1192 2008-09-11 04:06 2001-08-31 Show GitHub Exploit DB Packet Storm
278453 - oracle application_server SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL. NVD-CWE-Other
CVE-2000-1236 2008-09-11 04:06 2000-12-31 Show GitHub Exploit DB Packet Storm
278454 - openssl
freebsd 		openssl
freebsd 		OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak … NVD-CWE-Other
CVE-2000-0535 2008-09-11 04:05 2000-06-12 Show GitHub Exploit DB Packet Storm
278455 - microsoft windows_2000
windows_nt 		Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length. NVD-CWE-Other
CVE-2000-0544 2008-09-11 04:05 2000-06-5 Show GitHub Exploit DB Packet Storm
278456 - sgi mailx Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. NVD-CWE-Other
CVE-2000-0545 2008-09-11 04:05 2000-08-8 Show GitHub Exploit DB Packet Storm
278457 - lilikoi ceilidh Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field. NVD-CWE-Other
CVE-2000-0554 2008-09-11 04:05 2000-06-8 Show GitHub Exploit DB Packet Storm
278458 - hp openview_network_node_manager Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345. NVD-CWE-Other
CVE-2000-0558 2008-09-11 04:05 2000-06-6 Show GitHub Exploit DB Packet Storm
278459 - iss blackice_agent
blackice_defender 		BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower. NVD-CWE-Other
CVE-2000-0562 2008-09-11 04:05 2000-06-22 Show GitHub Exploit DB Packet Storm
278460 - mirabilis icq The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter. NVD-CWE-Other
CVE-2000-0564 2008-09-11 04:05 2000-05-29 Show GitHub Exploit DB Packet Storm