Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1951 5.5 警告
Local 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2024-56450 2025-01-15 15:00 2024-12-26 Show GitHub Exploit DB Packet Storm
1952 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microsoft Windows Server 2022 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-362
CWE-416
CWE-591
CVE-2024-49106 2025-01-15 14:52 2024-12-10 Show GitHub Exploit DB Packet Storm
1953 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows PrintWorkflowUserSvc の特権昇格の脆弱性 CWE-362
CWE-415
CWE-591
CVE-2024-49095 2025-01-15 14:48 2024-12-10 Show GitHub Exploit DB Packet Storm
1954 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-822
CWE-noinfo
CVE-2024-49090 2025-01-15 14:44 2024-12-10 Show GitHub Exploit DB Packet Storm
1955 5.5 警告
Local 		オムロン株式会社 NB-Designer オムロン製 NB-Designer における XML 外部エンティティ参照（XXE）の不適切な制限の脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-12298 2025-01-15 14:40 2025-01-14 Show GitHub Exploit DB Packet Storm
1956 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows カーネルの特権の昇格の脆弱性 CWE-362
競合状態 		CVE-2024-49084 2025-01-15 14:40 2024-12-10 Show GitHub Exploit DB Packet Storm
1957 6.8 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows エクスプローラーの情報漏えいの脆弱性 CWE-22
CWE-noinfo
CVE-2024-49082 2025-01-15 14:36 2024-12-10 Show GitHub Exploit DB Packet Storm
1958 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		入力方式エディター (IME) のリモートでコードが実行される脆弱性 CWE-416
CWE-noinfo
CVE-2024-49079 2025-01-15 14:31 2024-12-10 Show GitHub Exploit DB Packet Storm
1959 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows リモート デスクトップ サービスのサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2024-49075 2025-01-15 14:22 2024-12-10 Show GitHub Exploit DB Packet Storm
1960 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microso… 		Windows 展開サービスの情報漏えいの脆弱性 CWE-41
CWE-noinfo
CVE-2024-30036 2025-01-15 14:22 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280501 - chatness chatness Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message paramete… NVD-CWE-Other
CVE-2005-0930 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
280502 - jimmy the_includer PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code. NVD-CWE-Other
CVE-2005-0931 2008-09-6 05:47 2005-03-29 Show GitHub Exploit DB Packet Storm
280503 - wackowiki wackowiki Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-0934 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
280504 - yepyep mtftpd Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path. NVD-CWE-Other
CVE-2005-0959 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
280505 - openbsd openbsd Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash). NVD-CWE-Other
CVE-2005-0960 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
280506 - horde application_framework Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title. NVD-CWE-Other
CVE-2005-0961 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
280507 - apple mac_os_x Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via craf… NVD-CWE-Other
CVE-2005-0969 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
280508 - apple mac_os_x Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. NVD-CWE-Other
CVE-2005-0971 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
280509 - apple mac_os_x
mac_os_x_server 		Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters. NVD-CWE-Other
CVE-2005-0972 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
280510 - apple mac_os_x Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments. NVD-CWE-Other
CVE-2005-0973 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm