Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194801 7.5 危険 Nullsoft - Winamp の bmp.w5s におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4045 2012-07-24 15:38 2012-06-28 Show GitHub Exploit DB Packet Storm
194802 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3385 2012-07-24 15:38 2012-06-27 Show GitHub Exploit DB Packet Storm
194803 6.8 警告 WordPress.org - WordPress のカスタマイザにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-3384 2012-07-24 15:37 2012-06-27 Show GitHub Exploit DB Packet Storm
194804 2.6 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3383 2012-07-24 15:36 2012-06-27 Show GitHub Exploit DB Packet Storm
194805 2.6 注意 フェンリル株式会社 - Sleipnir Mobile for Android における WebView クラスに関する脆弱性 CWE-Other
その他 		CVE-2012-2646 2012-07-24 12:02 2012-07-24 Show GitHub Exploit DB Packet Storm
194806 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるアドレスバーを偽造される脆弱性 CWE-Other
その他 		CVE-2012-0479 2012-07-23 17:58 2012-04-24 Show GitHub Exploit DB Packet Storm
194807 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の texImage2D の実装における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0478 2012-07-23 17:57 2012-04-24 Show GitHub Exploit DB Packet Storm
194808 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0477 2012-07-23 17:57 2012-04-24 Show GitHub Exploit DB Packet Storm
194809 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の docshell の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0474 2012-07-23 17:56 2012-04-24 Show GitHub Exploit DB Packet Storm
194810 5 警告 Mozilla Foundation - 複数の Mozilla 製品の WebGLBuffer::FindMaxUshortElement 関数における重要な情報を取得される脆弱性 CWE-189
数値処理の問題 		CVE-2012-0473 2012-07-23 17:56 2012-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
451 7.8 HIGH
Local 		microsoft 365_apps
office 		Microsoft Office Visio Remote Code Execution Vulnerability Update NVD-CWE-noinfo
CVE-2025-21356 2025-01-22 04:37 2025-01-15 Show GitHub Exploit DB Packet Storm
452 7.8 HIGH
Local 		microsoft 365_apps
office
office_online_server 		Microsoft Excel Remote Code Execution Vulnerability Update NVD-CWE-noinfo
CVE-2025-21354 2025-01-22 04:36 2025-01-15 Show GitHub Exploit DB Packet Storm
453 7.2 HIGH
Network 		microsoft sharepoint_server Microsoft SharePoint Server Remote Code Execution Vulnerability Update NVD-CWE-noinfo
CVE-2025-21348 2025-01-22 04:30 2025-01-15 Show GitHub Exploit DB Packet Storm
454 7.8 HIGH
Local 		microsoft 365_apps
office 		Microsoft Office Security Feature Bypass Vulnerability Update NVD-CWE-noinfo
CVE-2025-21346 2025-01-22 04:29 2025-01-15 Show GitHub Exploit DB Packet Storm
455 - - - An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing … New - CVE-2025-23369 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
456 - - - An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via th… New - CVE-2024-55504 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
457 - - - An issue in System.Linq.Dynamic.Core Latest version v.1.4.6 allows remote access to properties on reflection types and static properties/fields. New - CVE-2024-51417 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
458 - - - SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function. New - CVE-2024-54795 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
459 - - - The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. New - CVE-2024-54794 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
460 - - - A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside… New - CVE-2024-54792 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm