Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194861 4.4 警告 オラクル - Oracle Solaris における mailx の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1750 2012-07-20 15:56 2012-07-17 Show GitHub Exploit DB Packet Storm
194862 5 警告 オラクル - Oracle iPlanet Web Server および Java System Web Server における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1738 2012-07-20 15:54 2012-07-17 Show GitHub Exploit DB Packet Storm
194863 5.6 警告 オラクル - Oracle Solaris における Logical Domains の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1687 2012-07-20 15:49 2012-07-17 Show GitHub Exploit DB Packet Storm
194864 2.1 注意 オラクル - Oracle Solaris における Kerberos/klist の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0563 2012-07-20 15:45 2012-07-17 Show GitHub Exploit DB Packet Storm
194865 7.1 危険 日本電気
ブルーコートシステムズ
ヤマハ
古河電気工業
サン・マイクロシステムズ
マイクロソフト
インターネットイニシアティブ
シスコシステムズ
オラクル
チェック・ポイント・ソフトウェア・テクノロジーズ		 - 複数の TCP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
CWE-noinfo
CVE-2008-4609 2012-07-20 15:35 2009-09-9 Show GitHub Exploit DB Packet Storm
194866 6.4 警告 オラクル - 複数の UNIX システムの PMTU Discovery 機能におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2001-0323 2012-07-20 15:32 2001-06-2 Show GitHub Exploit DB Packet Storm
194867 2.8 注意 オラクル - Oracle Industry Applications の Oracle Clinical Remote Data Capture における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1743 2012-07-20 15:25 2012-07-17 Show GitHub Exploit DB Packet Storm
194868 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3119 2012-07-20 14:27 2012-07-17 Show GitHub Exploit DB Packet Storm
194869 4 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools における PANPROC の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3118 2012-07-20 14:26 2012-07-17 Show GitHub Exploit DB Packet Storm
194870 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における EPERF の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3113 2012-07-20 14:26 2012-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 7.5 HIGH
Network 		- - A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (… CWE-789
CWE-476
 Memory Allocation with Excessive Size Value
 NULL Pointer Dereference 		CVE-2025-20165 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
552 9.9 CRITICAL
Network 		- - A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vuln… CWE-274
CWE-276
 Improper Handling of Insufficient Privileges
Incorrect Default Permissions  		CVE-2025-20156 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
553 4.4 MEDIUM
Network 		- - IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitr… CWE-79
Cross-site Scripting 		CVE-2024-51457 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
554 5.3 MEDIUM
Network 		- - A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected d… CWE-122
CWE-120
Heap-based Buffer Overflow
Classic Buffer Overflow 		CVE-2025-20128 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
555 - - - In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. Th… - CVE-2024-49734 2025-01-23 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
556 4.3 MEDIUM
Network 		07fly 07flycms 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html CWE-352
 Origin Validation Error 		CVE-2024-57161 2025-01-23 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
557 4.3 MEDIUM
Network 		07fly 07flycms 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html. CWE-352
 Origin Validation Error 		CVE-2024-57160 2025-01-23 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
558 8.8 HIGH
Network 		jfinaloa_project jfinaloa JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid. CWE-89
SQL Injection 		CVE-2024-57775 2025-01-23 02:07 2025-01-17 Show GitHub Exploit DB Packet Storm
559 9.8 CRITICAL
Network 		tenda ac18_firmware Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function. CWE-77
Command Injection 		CVE-2024-57583 2025-01-23 01:53 2025-01-17 Show GitHub Exploit DB Packet Storm
560 9.8 CRITICAL
Network 		tenda ac18_firmware Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. CWE-787
 Out-of-bounds Write 		CVE-2024-57575 2025-01-23 01:53 2025-01-17 Show GitHub Exploit DB Packet Storm