Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195161 1.9 注意 X.Org Foundation - X.Org xserver の os/utils.c における任意のファイルのアクセス権を 444 に変更される脆弱性 CWE-362
競合状態 		CVE-2011-4029 2012-08-3 14:50 2011-10-17 Show GitHub Exploit DB Packet Storm
195162 1.2 注意 X.Org Foundation - X.Org xserver の os/utils.c における情報漏えいの脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-4028 2012-08-3 14:48 2011-10-18 Show GitHub Exploit DB Packet Storm
195163 4.3 警告 ヤフー株式会社 - Yahoo!ツールバー (Chrome 版 / Safari 版) においてツールバーが書き換え可能な脆弱性 CWE-Other
その他 		CVE-2012-2647 2012-08-2 16:44 2012-07-30 Show GitHub Exploit DB Packet Storm
195164 5 警告 GoodiWare - GoodReader におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2648 2012-08-2 12:01 2012-08-2 Show GitHub Exploit DB Packet Storm
195165 6.5 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2962 2012-08-1 17:29 2012-07-11 Show GitHub Exploit DB Packet Storm
195166 7.5 危険 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) における任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3951 2012-08-1 16:53 2012-07-11 Show GitHub Exploit DB Packet Storm
195167 4.3 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3848 2012-08-1 16:52 2012-07-11 Show GitHub Exploit DB Packet Storm
195168 9.4 危険 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) における任意のファイルを作成または上書きされる脆弱性 CWE-Other
その他 		CVE-2012-2627 2012-08-1 16:47 2012-07-11 Show GitHub Exploit DB Packet Storm
195169 5 警告 デル - Plixer Scrutinizer (Dell SonicWALL Scrutinizer) における管理者アカウントを追加される脆弱性 CWE-287
不適切な認証 		CVE-2012-2626 2012-08-1 16:45 2012-07-11 Show GitHub Exploit DB Packet Storm
195170 4.4 警告 ICONICS, Inc. - ICONICS GENESIS32 および BizViz におけるアクセス制限を回避される脆弱性 CWE-310
暗号の問題 		CVE-2012-3018 2012-08-1 16:39 2012-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
861 - - - Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version (from 05/05/24) commit 64808a5e12c83b38f85c943dee0112e428dc2a43 allows a remote attacker to … - CVE-2024-53379 2025-01-24 08:15 2025-01-24 Show GitHub Exploit DB Packet Storm
862 - - - Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account. - CVE-2025-0693 2025-01-24 07:15 2025-01-24 Show GitHub Exploit DB Packet Storm
863 - - - Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet over the S1AP interface. An attacker may repeatedly send such an oversized pac… - CVE-2023-37013 2025-01-24 07:15 2025-01-23 Show GitHub Exploit DB Packet Storm
864 - - - This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node.js. These versions are no longer supported and do not receive updates, including security patches. The … - CVE-2025-23089 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
865 - - - This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node.js. These versions are no longer supported and do not receive updates, including security patches. The … - CVE-2025-23088 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
866 - - - This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node.js. These versions are no longer supported and do not receive updates, including security patches. The … - CVE-2025-23087 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
867 7.5 HIGH
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… - CVE-2025-21511 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
868 6.1 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… - CVE-2025-21513 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
869 6.1 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… - CVE-2025-21512 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
870 - - - Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was releas… - CVE-2025-23012 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm