Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193571 5.1 警告 Fedora Project - SSSD の auth_send 関数における pam_authenticate の認証要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-2940 2012-06-26 16:19 2010-08-30 Show GitHub Exploit DB Packet Storm
193572 7.5 危険 av scripts - AV Scripts AV Arcade における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2933 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
193573 9.3 危険 BarCodeWiz, Inc. - BarCodeWiz BarCode ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2932 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
193574 7.5 危険 ali kenan - AKY Blog の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2922 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
193575 6.8 警告 foobla
Joomla!		 - Joomla! の foobla_suggestions コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2920 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
193576 4.3 警告 aj square - AJ Square AJ Article の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2917 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
193577 7.5 危険 aj square - AJ Square AJ HYIP MERIDIAN の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2916 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
193578 7.5 危険 aj square - AJ Square AJ HYIP PRIME の welcome.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2915 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
193579 2.1 注意 アップル
citibank		 - Citibank Citi Mobile アプリケーションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2913 2012-06-26 16:19 2010-07-30 Show GitHub Exploit DB Packet Storm
193580 7.5 危険 alexred
Joomla!		 - Joomla! の oziogallery コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2910 2012-06-26 16:19 2010-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 - - - TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function. New - CVE-2024-57212 2025-01-11 02:15 2025-01-11 Show GitHub Exploit DB Packet Storm
202 - - - TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function. New - CVE-2024-57211 2025-01-11 02:15 2025-01-11 Show GitHub Exploit DB Packet Storm
203 - - - An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack. New - CVE-2024-54849 2025-01-11 02:15 2025-01-11 Show GitHub Exploit DB Packet Storm
204 - - - Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks. New - CVE-2024-54848 2025-01-11 02:15 2025-01-11 Show GitHub Exploit DB Packet Storm
205 - - - An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH) parameters and access sensitive data or execute a man-in-the-middle attack. New - CVE-2024-54847 2025-01-11 02:15 2025-01-11 Show GitHub Exploit DB Packet Storm
206 - - - An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack. New - CVE-2024-54846 2025-01-11 02:15 2025-01-11 Show GitHub Exploit DB Packet Storm
207 - - - Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs. New - CVE-2024-55226 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
208 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Entity Form Steps allows Cross-Site Scripting (XSS).This issue affects Entity Form Steps: … New - CVE-2024-13305 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
209 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) allows Cross-Site Scriptin… New - CVE-2024-13301 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
210 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting (XSS).This issue affects Tarte au Citron: from… New - CVE-2024-13298 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm