Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1921 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2021-46968 2025-01-15 16:43 2021-04-21 Show GitHub Exploit DB Packet Storm
1922 8.8 重要
Network 		Nuggethon Custom Order Statuses for WooCommerce Nuggethon の WordPress 用 Custom Order Statuses for WooCommerce におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-25930 2025-01-15 16:33 2024-02-29 Show GitHub Exploit DB Packet Storm
1923 8.8 重要
Network 		rymera Auto Refresh Single Page rymera の WordPress 用 Auto Refresh Single Page における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-1731 2025-01-15 16:12 2024-03-5 Show GitHub Exploit DB Packet Storm
1924 5.5 警告
Local 		south river technologies webdrive South River Technologies の WebDrive におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2024-1192 2025-01-15 16:05 2024-02-29 Show GitHub Exploit DB Packet Storm
1925 7.8 重要
Local 		クアルコム SC8180XP-ACAF ファームウェア
snapdragon 7c compute platform ファームウェア
fastconnect 6900 ファームウェア
SC8180X-AAAB ファームウェア
SC8180X+SDX55 ファームウェア
AQT1000&nb… 		複数のクアルコム製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-43541 2025-01-15 15:57 2023-09-19 Show GitHub Exploit DB Packet Storm
1926 8.1 重要
Adjacent 		Huawei WS7290-15 ファームウェア
WS8002-10 ファームウェア
WS8502-10 ファームウェア
WS8700-10 ファームウェア
WS8001-10 ファームウェア
WS8500-10 ファームウェア
PT9030-15 ファームウェア
WS8000-10 ファ… 		複数の Huawei 製品における脆弱性 CWE-420
CWE-noinfo
CVE-2023-52718 2025-01-15 15:55 2024-12-28 Show GitHub Exploit DB Packet Storm
1927 5.5 警告
Local 		アドビシステムズ Adobe Acrobat DC
Adobe Acrobat
Adobe Acrobat Reader DC 		アドビの Adobe Reader および Acrobat における境界外読み取りの CWE-125
境界外読み取り 		CVE-2022-44517 2025-01-15 15:48 2022-04-12 Show GitHub Exploit DB Packet Storm
1928 8.1 重要
Adjacent 		Huawei WS7200-10 ファームウェア
WS7206-10 ファームウェア
TC7001-10 ファームウェア 		複数の Huawei 製品における脆弱性 CWE-420
CWE-noinfo
CVE-2023-7266 2025-01-15 15:47 2024-12-28 Show GitHub Exploit DB Packet Storm
1929 7.5 重要
Network 		Alan Clarke urlite Alan Clarke の Node.js 用 urlite における非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
CWE-20
CVE-2023-51931 2025-01-15 15:45 2023-12-26 Show GitHub Exploit DB Packet Storm
1930 4.3 警告
Adjacent 		Huawei HUAWEI 4G Router B612 ファームウェア Huawei の HUAWEI 4G Router B612 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-124
CWE-787
CVE-2020-9086 2025-01-15 15:41 2020-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281931 - astrocam astrocam astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected v… CWE-20
 Improper Input Validation  		CVE-2002-1874 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281932 - mcafee entercept_agent Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the en… NVD-CWE-Other
CVE-2002-1875 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281933 - w-agora w-agora PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter. NVD-CWE-Other
CVE-2002-1878 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281934 - lokwa lokwabb SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php. NVD-CWE-Other
CVE-2002-1879 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281935 - lokwa lokwabb LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php. NVD-CWE-Other
CVE-2002-1880 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281936 - macromedia flash_player Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by… NVD-CWE-Other
CVE-2002-1881 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281937 - oracle e-business_suite Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors. NVD-CWE-Other
CVE-2002-1882 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281938 - trolltech qt_assistant Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a… NVD-CWE-Other
CVE-2002-1883 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281939 - py-membres py-membres index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin". NVD-CWE-Other
CVE-2002-1884 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
281940 - powerphlogger powerphlogger PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter. NVD-CWE-Other
CVE-2002-1885 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm