Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195981 7.5 危険 eFront Learning - eFront の ask_chat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1918 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
195982 9.3 危険 コンソナ - Consona Live Assistance の SdcWebSecureBase インターフェースの pluginlicense.ini のデフォルト設定における ActiveX 実行に対する制限を回避される脆弱性 CWE-16
環境設定 		CVE-2010-1913 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
195983 9.3 危険 コンソナ - Consona Live Assistance の SdcWebSecureBase インターフェースにおける ActiveX 実行上で制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1912 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
195984 9.3 危険 コンソナ - Consona Live Assistance の SdcWebSecureBase インターフェースの site-locking 実装における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2010-1911 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
195985 5.1 警告 コンソナ - Consona Live Assistance の Forgot Password 実装における空白の Hint 質問および空白の Hint 答えを持つアカウントのパスワードをリセットされる脆弱性 CWE-287
不適切な認証 		CVE-2010-1910 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
195986 7.6 危険 コンソナ - Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールの RunCmd メソッドにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1909 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
195987 9.3 危険 コンソナ - Consona Live Assistance の tgctlcm.dll の SdcUser.TgConCtl ActiveX コントロールにおける任意のプログラムを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1908 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
195988 4.3 警告 コンソナ - Consona Live Assistance の SdcUser.TgConCtl ActiveX コントロールにおける特定のユーザディレクトリへのパス名を特定される脆弱性 CWE-200
情報漏えい 		CVE-2010-1907 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
195989 7.2 危険 コンソナ - Consona Dynamic Agent などの tgsrv.exe における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2010-1906 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
195990 4.3 警告 コンソナ - Consona Live Assistance および他の製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1905 2012-06-26 16:19 2010-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1321 5.5 MEDIUM
Local 		- - A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, thr… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2025-0736 2025-01-28 18:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1322 - - - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-0290 2025-01-28 18:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1323 - - - Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is loggin… CWE-79
Cross-site Scripting 		CVE-2025-24810 2025-01-28 14:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1324 - - - NVIDIA vGPU software contains a vulnerability in the host driver, where it can allow a guest to cause an interrupt storm on the host, which may lead to denial of service. CWE-459
 Incomplete Cleanup 		CVE-2024-53881 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1325 - - - NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure. CWE-459
 Incomplete Cleanup 		CVE-2024-53869 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1326 - - - NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead … CWE-787
 Out-of-bounds Write 		CVE-2024-0150 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1327 - - - NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information d… CWE-125
Out-of-bounds Read 		CVE-2024-0149 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1328 - - - NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering. CWE-416
 Use After Free 		CVE-2024-0147 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1329 - - - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption. A successful exploit of this vulnerability might lead to code executio… CWE-120
Classic Buffer Overflow 		CVE-2024-0146 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1330 - - - NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data issue. A successful exploit of this vulnerability might lead to code execution, d… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-0140 2025-01-28 13:15 2025-01-28 Show GitHub Exploit DB Packet Storm