Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189991 8.3 危険 LIGHTTPD - lighttpd の mod_access.c における url.access-deny 設定を回避される脆弱性 - CVE-2007-3949 2012-09-25 16:47 2007-07-23 Show GitHub Exploit DB Packet Storm
189992 4.3 警告 LIGHTTPD - lighttpd の connections.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3948 2012-09-25 16:47 2007-07-23 Show GitHub Exploit DB Packet Storm
189993 5.8 警告 LIGHTTPD - lighttpd の request.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3947 2012-09-25 16:47 2007-07-23 Show GitHub Exploit DB Packet Storm
189994 6.4 警告 LIGHTTPD - lighttpd の http_auth.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3946 2012-09-25 16:47 2007-07-23 Show GitHub Exploit DB Packet Storm
189995 4.3 警告 jasmine - Jasmine CMS の profile.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3941 2012-09-25 16:47 2007-07-20 Show GitHub Exploit DB Packet Storm
189996 7.5 危険 MAXDev - MD-Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3938 2012-09-25 16:47 2007-07-20 Show GitHub Exploit DB Packet Storm
189997 7.5 危険 Joomla! - Joomla! 用の Expose RC35 における任意の PHP コードを実行される脆弱性 - CVE-2007-3932 2012-09-25 16:47 2007-07-20 Show GitHub Exploit DB Packet Storm
189998 4.3 警告 Andreas Gohr
マイクロソフト		 - Microsoft Internet Explorer などにおけるクロスサイトスクリプティング攻撃を実行される脆弱性 - CVE-2007-3930 2012-09-25 16:47 2007-07-20 Show GitHub Exploit DB Packet Storm
189999 9.3 危険 Opera Software ASA - Opera の BitTorrent サポートにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2007-3929 2012-09-25 16:47 2007-07-20 Show GitHub Exploit DB Packet Storm
190000 10 危険 Ipswitch, Inc. - Ipswitch IMail Server 2006 におけるバッファオーバーフローの脆弱性 - CVE-2007-3927 2012-09-25 16:47 2007-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
401 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracing_cpumask_write If a large count is provided, it will trigger a warning in bitmap_parse_user… NVD-CWE-noinfo
CVE-2024-56763 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
402 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Syzbot reports [1] an uninitialized value issue found by K… CWE-908
 Use of Uninitialized Resource 		CVE-2024-56769 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
403 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: x86/fred: Clear WFE in missing-ENDBRANCH #CPs An indirect branch instruction sets the CPU indirect branch tracker (IBT) into WAIT… NVD-CWE-noinfo
CVE-2024-56761 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
404 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfs_cow_block(), and we h… CWE-416
 Use After Free 		CVE-2024-56759 2025-01-10 01:16 2025-01-7 Show GitHub Exploit DB Packet Storm
405 - - - An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulner… - CVE-2023-24012 2025-01-10 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
406 - - - An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulner… - CVE-2023-24011 2025-01-10 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
407 - - - An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulner… - CVE-2023-24010 2025-01-10 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
408 - - - The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used a… - CVE-2024-12736 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
409 - - - The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used aga… - CVE-2024-12731 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
410 - - - The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be use… - CVE-2024-12715 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm