Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188041 10 危険 アップル
Mozilla Foundation
FreeType Project		 - Mozilla Firefox Mobile およびその他の製品で使用される FreeType におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-1126 2012-10-3 18:05 2012-04-24 Show GitHub Exploit DB Packet Storm
188042 4.4 警告 freedesktop.org - PolicyKit における認証なしで root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4945 2012-10-3 17:20 2012-10-1 Show GitHub Exploit DB Packet Storm
188043 4.3 警告 Matthew Fries - WordPress 用 MF Gig Calendar プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4242 2012-10-3 17:17 2012-10-1 Show GitHub Exploit DB Packet Storm
188044 3.5 注意 Eucalyptus Systems - Eucalyptus における不特定の認証チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4065 2012-10-3 17:16 2012-08-28 Show GitHub Exploit DB Packet Storm
188045 6.5 警告 Eucalyptus Systems - Eucalyptus における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4064 2012-10-3 17:14 2012-08-28 Show GitHub Exploit DB Packet Storm
188046 5 警告 Eucalyptus Systems - Eucalyptus におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4063 2012-10-3 17:10 2012-08-28 Show GitHub Exploit DB Packet Storm
188047 4.3 警告 NextBBS - NextBBS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1604 2012-10-3 17:06 2012-10-1 Show GitHub Exploit DB Packet Storm
188048 7.5 危険 NextBBS - NextBBS の ajaxserver.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1603 2012-10-3 17:05 2012-10-1 Show GitHub Exploit DB Packet Storm
188049 7.5 危険 NextBBS - NextBBS の user.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2012-1602 2012-10-3 17:03 2012-10-1 Show GitHub Exploit DB Packet Storm
188050 5.8 警告 ocPortal - ocPortal の index.php におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5234 2012-10-3 17:02 2012-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221 5.4 MEDIUM
Network 		- - Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute arbitrary cod… New CWE-79
Cross-site Scripting 		CVE-2024-53965 2025-02-5 09:15 2025-02-5 Show GitHub Exploit DB Packet Storm
222 5.4 MEDIUM
Network 		- - Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts in… New CWE-79
Cross-site Scripting 		CVE-2024-53964 2025-02-5 09:15 2025-02-5 Show GitHub Exploit DB Packet Storm
223 5.4 MEDIUM
Network 		- - Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute arbitrary cod… New CWE-79
Cross-site Scripting 		CVE-2024-53963 2025-02-5 09:15 2025-02-5 Show GitHub Exploit DB Packet Storm
224 5.4 MEDIUM
Network 		- - Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts in… New CWE-79
Cross-site Scripting 		CVE-2024-53962 2025-02-5 09:15 2025-02-5 Show GitHub Exploit DB Packet Storm
225 - - - In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files. This could lead to a heap-based buffe… New CWE-122
Heap-based Buffer Overflow 		CVE-2023-40222 2025-02-5 08:15 2025-02-5 Show GitHub Exploit DB Packet Storm
226 - - - In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds w… New CWE-787
 Out-of-bounds Write 		CVE-2023-39943 2025-02-5 08:15 2025-02-5 Show GitHub Exploit DB Packet Storm
227 - - - Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection.  A bad actor with the required OpenText Content Management pri… New CWE-1287
 Improper Validation of Specified Type of Input 		CVE-2024-8125 2025-02-5 07:15 2025-02-5 Show GitHub Exploit DB Packet Storm
228 - - - Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the … New CWE-281
 Improper Preservation of Permissions 		CVE-2024-53994 2025-02-5 07:15 2025-02-5 Show GitHub Exploit DB Packet Storm
229 - - - Discourse is an open source platform for community discussion. In affected versions the endpoint for generating inline oneboxes for URLs wasn't enforcing limits on the number of URLs that it accepted… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-53851 2025-02-5 07:15 2025-02-5 Show GitHub Exploit DB Packet Storm
230 - - - Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, and with CSP disabled, activity streams in the user's profile page may be vulner… New CWE-79
Cross-site Scripting 		CVE-2024-53266 2025-02-5 07:15 2025-02-5 Show GitHub Exploit DB Packet Storm