Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1921 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2021-46968 2025-01-15 16:43 2021-04-21 Show GitHub Exploit DB Packet Storm
1922 8.8 重要
Network 		Nuggethon Custom Order Statuses for WooCommerce Nuggethon の WordPress 用 Custom Order Statuses for WooCommerce におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-25930 2025-01-15 16:33 2024-02-29 Show GitHub Exploit DB Packet Storm
1923 8.8 重要
Network 		rymera Auto Refresh Single Page rymera の WordPress 用 Auto Refresh Single Page における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-1731 2025-01-15 16:12 2024-03-5 Show GitHub Exploit DB Packet Storm
1924 5.5 警告
Local 		south river technologies webdrive South River Technologies の WebDrive におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2024-1192 2025-01-15 16:05 2024-02-29 Show GitHub Exploit DB Packet Storm
1925 7.8 重要
Local 		クアルコム SC8180XP-ACAF ファームウェア
snapdragon 7c compute platform ファームウェア
fastconnect 6900 ファームウェア
SC8180X-AAAB ファームウェア
SC8180X+SDX55 ファームウェア
AQT1000&nb… 		複数のクアルコム製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-43541 2025-01-15 15:57 2023-09-19 Show GitHub Exploit DB Packet Storm
1926 8.1 重要
Adjacent 		Huawei WS7290-15 ファームウェア
WS8002-10 ファームウェア
WS8502-10 ファームウェア
WS8700-10 ファームウェア
WS8001-10 ファームウェア
WS8500-10 ファームウェア
PT9030-15 ファームウェア
WS8000-10 ファ… 		複数の Huawei 製品における脆弱性 CWE-420
CWE-noinfo
CVE-2023-52718 2025-01-15 15:55 2024-12-28 Show GitHub Exploit DB Packet Storm
1927 5.5 警告
Local 		アドビシステムズ Adobe Acrobat DC
Adobe Acrobat
Adobe Acrobat Reader DC 		アドビの Adobe Reader および Acrobat における境界外読み取りの CWE-125
境界外読み取り 		CVE-2022-44517 2025-01-15 15:48 2022-04-12 Show GitHub Exploit DB Packet Storm
1928 8.1 重要
Adjacent 		Huawei WS7200-10 ファームウェア
WS7206-10 ファームウェア
TC7001-10 ファームウェア 		複数の Huawei 製品における脆弱性 CWE-420
CWE-noinfo
CVE-2023-7266 2025-01-15 15:47 2024-12-28 Show GitHub Exploit DB Packet Storm
1929 7.5 重要
Network 		Alan Clarke urlite Alan Clarke の Node.js 用 urlite における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
CWE-20
CVE-2023-51931 2025-01-15 15:45 2023-12-26 Show GitHub Exploit DB Packet Storm
1930 4.3 警告
Adjacent 		Huawei HUAWEI 4G Router B612 ファームウェア Huawei の HUAWEI 4G Router B612 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-124
CWE-787
CVE-2020-9086 2025-01-15 15:41 2020-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277951 - smartisoft phpbazar phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-4222 2009-12-8 14:00 2009-12-8 Show GitHub Exploit DB Packet Storm
277952 - gforge gforge GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl … CWE-59
Link Following 		CVE-2009-3304 2009-12-7 14:00 2009-12-5 Show GitHub Exploit DB Packet Storm
277953 - ibm db2
db2_universal_database 		dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-4150 2009-12-7 14:00 2009-12-2 Show GitHub Exploit DB Packet Storm
277954 - tw_productfinder tw_productfinder SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4163 2009-12-7 14:00 2009-12-3 Show GitHub Exploit DB Packet Storm
277955 - lukas_taferner it_basetag Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via unspecified vectors. NVD-CWE-noinfo
CVE-2009-4167 2009-12-7 14:00 2009-12-3 Show GitHub Exploit DB Packet Storm
277956 - sun java_system_portal_server Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via uns… CWE-79
Cross-site Scripting 		CVE-2009-4187 2009-12-4 14:00 2009-12-4 Show GitHub Exploit DB Packet Storm
277957 - hp operations_dashboard HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct un… CWE-255
Credentials Management 		CVE-2009-4188 2009-12-4 14:00 2009-12-4 Show GitHub Exploit DB Packet Storm
277958 - hp operations_manager HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestr… CWE-255
Credentials Management 		CVE-2009-4189 2009-12-4 14:00 2009-12-4 Show GitHub Exploit DB Packet Storm
277959 - sun opensolaris Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service (panic) via unknown vectors, as demonstrated by the vd_solaris2 module in VulnD… NVD-CWE-noinfo
CVE-2009-4190 2009-12-4 14:00 2009-12-4 Show GitHub Exploit DB Packet Storm
277960 - interspire knowledge_manager Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: the proven… CWE-22
Path Traversal 		CVE-2009-4192 2009-12-4 14:00 2009-12-4 Show GitHub Exploit DB Packet Storm