Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 2:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194671 5 警告 Martin Nagy - bind-dyndb-ldap の src/ldap_convert.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-3429 2012-08-9 16:43 2012-08-1 Show GitHub Exploit DB Packet Storm
194672 7.5 危険 レッドハット - IcedTea-Web プラグインにおける重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2012-3423 2012-08-9 16:39 2012-06-1 Show GitHub Exploit DB Packet Storm
194673 4.4 警告 GNU Project - GNU Automake における任意のコードを実行される脆弱性 CWE-264
CWE-362
CVE-2012-3386 2012-08-9 16:36 2012-07-9 Show GitHub Exploit DB Packet Storm
194674 10 危険 Ubisoft - Ubisoft Uplay PC 用 Web ブラウザのプラグインにおける任意のプログラムを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-4177 2012-08-9 16:27 2012-07-30 Show GitHub Exploit DB Packet Storm
194675 3.6 注意 eXtplorer - eXtplorer における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3454 2012-08-9 16:26 2012-08-7 Show GitHub Exploit DB Packet Storm
194676 3.6 注意 Debian - logol における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3453 2012-08-9 16:22 2012-08-7 Show GitHub Exploit DB Packet Storm
194677 3.3 注意 GNOME Project - gnome-screensaver における無人のワークステーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3452 2012-08-9 16:20 2012-08-7 Show GitHub Exploit DB Packet Storm
194678 3.6 注意 Open vSwitch - Open vSwitch における任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3449 2012-08-9 16:12 2012-08-7 Show GitHub Exploit DB Packet Storm
194679 4.3 警告 KDE project - KDE PIM における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-16
環境設定
CVE-2012-3413 2012-08-9 16:10 2012-08-7 Show GitHub Exploit DB Packet Storm
194680 4.3 警告 ヒューレット・パッカード - HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2022 2012-08-9 15:45 2012-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 - - - Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was releas… - CVE-2025-23012 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
322 - - - Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JS… - CVE-2025-23011 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
323 - - - Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter. - CVE-2024-57370 2025-01-24 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
324 4.9 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21491 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
325 4.9 MEDIUM
Network
- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… - CVE-2025-21490 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
326 6.1 MEDIUM
Network
- - Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vu… - CVE-2025-21489 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
327 5.4 MEDIUM
Network
- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable … - CVE-2024-21245 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
328 7.8 HIGH
Local
google android In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv… CWE-787
 Out-of-bounds Write
CVE-2018-9389 2025-01-24 04:56 2025-01-18 Show GitHub Exploit DB Packet Storm
329 5.5 MEDIUM
Local
google android In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… CWE-862
 Missing Authorization
CVE-2018-9406 2025-01-24 04:55 2025-01-18 Show GitHub Exploit DB Packet Storm
330 5.5 MEDIUM
Local
google android In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service w… NVD-CWE-noinfo
CVE-2017-13322 2025-01-24 04:54 2025-01-18 Show GitHub Exploit DB Packet Storm