Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188051 5 警告 ocPortal - ocPortal の catalogue_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1471 2012-10-3 17:02 2012-03-21 Show GitHub Exploit DB Packet Storm
188052 4.3 警告 ocPortal - ocPortal の code_editor.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1470 2012-10-3 17:01 2012-03-21 Show GitHub Exploit DB Packet Storm
188053 2.1 注意 stickynote project - Drupal 用 stickynote モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5233 2012-10-3 16:57 2012-01-17 Show GitHub Exploit DB Packet Storm
188054 4.3 警告 stickynote project - Drupal 用 stickynote モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1636 2012-10-3 16:56 2012-01-17 Show GitHub Exploit DB Packet Storm
188055 4.3 警告 OneOrZero - OneOrZero AIMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0989 2012-10-3 16:54 2012-10-1 Show GitHub Exploit DB Packet Storm
188056 4.3 警告 Quickl Form - Joomla! 用 Quickl Form コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5232 2012-10-3 16:53 2012-10-1 Show GitHub Exploit DB Packet Storm
188057 7.5 危険 miniCMS - miniCMS における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5231 2012-10-3 16:51 2012-10-1 Show GitHub Exploit DB Packet Storm
188058 7.5 危険 Jextensions - Joomla! 用 JE Story Submit コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-5230 2012-10-3 16:46 2012-10-1 Show GitHub Exploit DB Packet Storm
188059 4.3 警告 Slideshow Gallery 2 - WordPress 用 Slideshow Gallery2 プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5229 2012-10-3 16:46 2012-10-1 Show GitHub Exploit DB Packet Storm
188060 4.3 警告 Tincan - phplist の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5228 2012-10-3 16:45 2012-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 7.7 HIGH
Network
- - A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS condition on an affected dev… New - CVE-2025-20172 2025-02-6 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
142 - - - access_device.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. New - CVE-2023-52164 2025-02-6 02:15 2025-02-4 Show GitHub Exploit DB Packet Storm
143 - - - Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. New - CVE-2023-52163 2025-02-6 02:15 2025-02-4 Show GitHub Exploit DB Packet Storm
144 - - - The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (with no permissions) to place phone calls without user intera… New - CVE-2024-36437 2025-02-6 02:15 2025-02-4 Show GitHub Exploit DB Packet Storm
145 7.7 HIGH
Network
- - A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerabili… New - CVE-2025-20171 2025-02-6 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
146 7.7 HIGH
Network
- - A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerabili… New - CVE-2025-20170 2025-02-6 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
147 7.7 HIGH
Network
- - A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerabili… New CWE-805
 Buffer Access with Incorrect Length Value
CVE-2025-20169 2025-02-6 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
148 9.1 CRITICAL
Network
- - A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node… New CWE-285
Improper Authorization
CVE-2025-20125 2025-02-6 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
149 9.9 CRITICAL
Network
- - A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure des… New CWE-502
 Deserialization of Untrusted Data
CVE-2025-20124 2025-02-6 02:15 2025-02-6 Show GitHub Exploit DB Packet Storm
150 - - - RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list. Update - CVE-2024-57437 2025-02-6 02:15 2025-01-30 Show GitHub Exploit DB Packet Storm