Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 23, 2025, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194811	2.1	注意	Moshe Weitzman	-	Drupal 用 Organic Groups モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3800	2012-06-29 11:02	2012-06-6	Show	GitHub Exploit DB Packet Storm

194812	5.1	警告	Nextide	-	Drupal 用 Maestro モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-3799	2012-06-29 11:01	2012-06-6	Show	GitHub Exploit DB Packet Storm

194813	5	警告	Bryce Hamrick	-	Drupal 用 Janrain Capture モジュールにおけるパスワードの推測が容易になる脆弱性	CWE-200 情報漏えい	CVE-2012-3798	2012-06-29 10:55	2012-06-13	Show	GitHub Exploit DB Packet Storm

194814	2.6	注意	Ricardo Sanz Ante	-	Drupal 用 Ubercart AJAX Cart における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-2731	2012-06-29 10:54	2012-06-13	Show	GitHub Exploit DB Packet Storm

194815	7.5	危険	AlexisWilke	-	Drupal 用 Protected Node モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2730	2012-06-29 10:52	2012-06-13	Show	GitHub Exploit DB Packet Storm

194816	6.8	警告	ADCI LLC	-	Drupal 用 SimpleMeta モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2729	2012-06-29 10:52	2012-06-13	Show	GitHub Exploit DB Packet Storm

194817	6.8	警告	Ronan Dowling	-	Drupal 用 Node Hierarchy モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2728	2012-06-29 10:51	2012-06-13	Show	GitHub Exploit DB Packet Storm

194818	5.8	警告	JanRain	-	Drupal 用の Janrain Capture モジュールにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-2727	2012-06-29 10:51	2012-06-13	Show	GitHub Exploit DB Packet Storm

194819	2.1	注意	Alberto Trujillo Gonzalez	-	Drupal 用の Protest モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2726	2012-06-29 10:49	2012-06-6	Show	GitHub Exploit DB Packet Storm

194820	3.5	注意	Authoring HTML	-	Drupal 用の Authoring HTML モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2725	2012-06-29 10:49	2012-06-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
331	-		-	-	OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lack of input validation, which could lead to account takeover. New	-	CVE-2024-48392	2025-01-22 06:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

332	5.4	MEDIUM Network	-	-	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable … New	-	CVE-2024-21245	2025-01-22 06:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

333	7.2	HIGH Network	fortinet	fortimanager fortianalyzer	An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12… Update	CWE-22 Path Traversal	CVE-2024-33502	2025-01-22 06:03	2025-01-14	Show	GitHub Exploit DB Packet Storm

334	-		-	-	Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's funct… New	CWE-671 Lack of Administrator Control over Security	CVE-2025-24024	2025-01-22 05:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

335	-		-	-	The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message. New	-	CVE-2024-42936	2025-01-22 05:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

336	-		-	-	Homarr before v0.14.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notebook widget. New	-	CVE-2023-45908	2025-01-22 05:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

337	-		-	-	Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3 New	-	CVE-2024-13454	2025-01-22 05:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

338	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_10_1607 windows_10_1507 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_…	Windows Telephony Service Remote Code Execution Vulnerability Update	NVD-CWE-noinfo	CVE-2025-21339	2025-01-22 05:11	2025-01-15	Show	GitHub Exploit DB Packet Storm

339	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 office windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 w…	GDI+ Remote Code Execution Vulnerability Update	NVD-CWE-noinfo	CVE-2025-21338	2025-01-22 05:08	2025-01-15	Show	GitHub Exploit DB Packet Storm

340	5.6	MEDIUM Local	microsoft	windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_11_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_…	Windows Cryptographic Information Disclosure Vulnerability Update	NVD-CWE-noinfo	CVE-2025-21336	2025-01-22 05:06	2025-01-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed