Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195031 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC Celerra NAS 機器におけるユーザのデータディレクトリ内の任意のファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2860 2012-06-26 16:19 2010-08-5 Show GitHub Exploit DB Packet Storm
195032 5 警告 boesch-it - SimpNews の news.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2859 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
195033 4.3 警告 boesch-it - SimpNews の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2858 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
195034 6.8 警告 Daniel James Scott - Joomla! 用の Music Manager コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2857 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
195035 5 警告 gonzalo maser
Joomla!		 - Joomla! 用の InterJoomla ArtForms コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2848 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
195036 7.5 危険 gonzalo maser
Joomla!		 - Joomla! 用の InterJoomla ArtForms コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2847 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
195037 4.3 警告 gonzalo maser
Joomla!		 - Joomla! 用の InterJoomla ArtForms コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2846 2012-06-26 16:19 2010-07-24 Show GitHub Exploit DB Packet Storm
195038 7.8 危険 シスコシステムズ - Cisco Unified Presence の PE サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2840 2012-06-26 16:19 2010-08-25 Show GitHub Exploit DB Packet Storm
195039 7.8 危険 シスコシステムズ - Cisco Unified Presence の SIPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2839 2012-06-26 16:19 2010-08-25 Show GitHub Exploit DB Packet Storm
195040 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager の SendCombinedStatusInfo 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2838 2012-06-26 16:19 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 - - - In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has its own set of registers. Thos… - CVE-2025-21632 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
612 - - - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-… - CVE-2025-21631 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
613 4.5 MEDIUM
Local 		- - A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulatio… CWE-426
 Untrusted Search Path 		CVE-2025-0567 2025-01-19 17:15 2025-01-19 Show GitHub Exploit DB Packet Storm
614 8.8 HIGH
Network 		- - A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac le… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2025-0566 2025-01-19 16:15 2025-01-19 Show GitHub Exploit DB Packet Storm
615 7.3 HIGH
Network 		- - A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id leads to sql i… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0565 2025-01-19 15:15 2025-01-19 Show GitHub Exploit DB Packet Storm
616 5.5 MEDIUM
Network 		- - The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient … CWE-79
Cross-site Scripting 		CVE-2024-8722 2025-01-19 14:15 2025-01-19 Show GitHub Exploit DB Packet Storm
617 7.3 HIGH
Network 		- - A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /authenticate.php. The manipul… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0564 2025-01-19 13:15 2025-01-19 Show GitHub Exploit DB Packet Storm
618 4.3 MEDIUM
Network 		- - IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on untrusted inputs. CWE-807
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2024-45654 2025-01-19 12:15 2025-01-19 Show GitHub Exploit DB Packet Storm
619 4.3 MEDIUM
Network 		- - IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the s… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2024-45653 2025-01-19 12:15 2025-01-19 Show GitHub Exploit DB Packet Storm
620 6.5 MEDIUM
Network 		- - IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to … CWE-22
Path Traversal 		CVE-2024-45652 2025-01-19 12:15 2025-01-19 Show GitHub Exploit DB Packet Storm