Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194871 1.2 注意 FreeBSD
NetBSD		 - 複数の BSD 製品で使用される Coda ファイルシステムカーネルモジュールにおける重要なヒープメモリを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-3014 2012-06-26 16:19 2010-08-7 Show GitHub Exploit DB Packet Storm
194872 9.3 危険 シトリックス・システムズ - XenApp & XenDesktop 用の Citrix Online プラグインのIICAClient インターフェースにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2991 2012-06-26 16:19 2010-08-2 Show GitHub Exploit DB Packet Storm
194873 9.3 危険 シトリックス・システムズ - XenApp & XenDesktop 用の Citrix Online プラグインなどの製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2990 2012-06-26 16:19 2010-08-2 Show GitHub Exploit DB Packet Storm
194874 4.3 警告 シスコシステムズ - Cisco WCS Solution におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2988 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
194875 4.3 警告 シスコシステムズ - Cisco WCS Solution におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2987 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
194876 4.3 警告 シスコシステムズ - Cisco WCS Solution の webacs/QuickSearchAction.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2986 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
194877 10 危険 シスコシステムズ - Cisco UWN Solution におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2010-2984 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
194878 7.8 危険 シスコシステムズ - Cisco UWN Solution のワークグループブリッジ機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2983 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
194879 7.1 危険 シスコシステムズ - Cisco UWN Solution におけるグループパスワードを発見される脆弱性 CWE-200
情報漏えい 		CVE-2010-2982 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
194880 7.1 危険 シスコシステムズ - Cisco UWN Solution におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2981 2012-06-26 16:19 2010-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
401 - - - A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows an attacker to elevate their privileges via executing a specially crafted executable. - CVE-2024-55511 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
402 - - - A JNDI injection issue was discovered in Cloudera JDBC Connector for Hive before 2.6.26 and JDBC Connector for Impala before 2.6.35. Attackers can inject malicious parameters into the JDBC URL, trigg… - CVE-2024-54660 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
403 - - - An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails. - CVE-2024-48460 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
404 - - - Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request. - CVE-2024-46450 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
405 8.5 HIGH
Network 		boldgrid w3_total_cache The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. … CWE-862
 Missing Authorization 		CVE-2024-12365 2025-01-17 06:31 2025-01-14 Show GitHub Exploit DB Packet Storm
406 7.5 HIGH
Network 		boldgrid w3_total_cache The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unaut… NVD-CWE-noinfo
CVE-2024-12008 2025-01-17 06:30 2025-01-14 Show GitHub Exploit DB Packet Storm
407 5.3 MEDIUM
Network 		boldgrid w3_total_cache The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This mak… CWE-862
 Missing Authorization 		CVE-2024-12006 2025-01-17 06:30 2025-01-14 Show GitHub Exploit DB Packet Storm
408 5.4 MEDIUM
Network 		themeisle orbit_fox The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table widget in all versions up to, and including, 2.10.43 due to insufficient in… CWE-79
Cross-site Scripting 		CVE-2025-0311 2025-01-17 06:29 2025-01-10 Show GitHub Exploit DB Packet Storm
409 5.4 MEDIUM
Network 		themeisle orbit_fox The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 2.10.43 due to insufficient input sani… CWE-79
Cross-site Scripting 		CVE-2024-13183 2025-01-17 06:28 2025-01-10 Show GitHub Exploit DB Packet Storm
410 7.2 HIGH
Network 		simple-help simplehelp SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to… CWE-59
Link Following 		CVE-2024-57728 2025-01-17 06:24 2025-01-16 Show GitHub Exploit DB Packet Storm