Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1961 4.6 警告
Physics 		Huawei Mate 20 ファームウェア Huawei の Mate 20 ファームウェアにおける脆弱性 CWE-200
CWE-noinfo
CVE-2020-9082 2025-01-15 14:18 2020-02-18 Show GitHub Exploit DB Packet Storm
1962 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2987 2025-01-15 14:18 2024-03-27 Show GitHub Exploit DB Packet Storm
1963 7.8 重要
Local 		クアルコム qam8650p ファームウェア
qca6698aq ファームウェア
SA8155P ファームウェア
fastconnect 6900 ファームウェア
QCA6595AU ファームウェア
qam8775p ファームウェア
QCA6574A ファームウェア
fastconnec… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-21472 2025-01-15 14:18 2024-04-1 Show GitHub Exploit DB Packet Storm
1964 7.7 重要
Network 		Synology Inc. Surveillance Station Synology Inc. の Surveillance Station における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-29228 2025-01-15 14:18 2024-03-28 Show GitHub Exploit DB Packet Storm
1965 7.5 重要
Network 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-672
CWE-noinfo
CVE-2024-56434 2025-01-15 14:18 2024-12-26 Show GitHub Exploit DB Packet Storm
1966 6.5 警告
Network 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server 		Microsoft SharePoint の情報漏えいの脆弱性 CWE-23
CWE-noinfo
CVE-2024-49062 2025-01-15 14:17 2024-12-10 Show GitHub Exploit DB Packet Storm
1967 9.8 緊急
Network 		株式会社ワイズ STEALTHONE D440
STEALTHONE D220
STEALTHONE D340 		ワイズ製 STEALTHONE D220/D340/D440 における複数の脆弱性 CWE-78
CWE-89
CVE-2025-20016
CVE-2025-20055
CVE-2025-20620 		2025-01-15 14:07 2025-01-14 Show GitHub Exploit DB Packet Storm
1968 6.6 警告
Network 		オムロン株式会社 マシンオートメーションコントローラ NX シリーズ
マシンオートメーションコントローラ NJ シリーズ 		オムロン製マシンオートメーションコントローラ NJ/NX シリーズにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-12083 2025-01-15 14:07 2025-01-14 Show GitHub Exploit DB Packet Storm
1969 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows CNG キー分離サービスの特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2024-30031 2025-01-15 14:03 2024-05-14 Show GitHub Exploit DB Packet Storm
1970 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Window… 		NTFS の特権の昇格の脆弱性 CWE-415
CWE-noinfo
CVE-2024-30027 2025-01-15 14:00 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280911 - apple safari
mac_os_x 		Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file. NVD-CWE-Other
CVE-2005-2522 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
280912 - apple weblog_server
mac_os_x 		Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-2523 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
280913 - apple safari
mac_os_x
mac_os_x_server 		Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site. NVD-CWE-Other
CVE-2005-2524 2008-09-6 05:51 2005-10-26 Show GitHub Exploit DB Packet Storm
280914 - easy_software_products
apple 		cups
mac_os_x 		CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt). NVD-CWE-Other
CVE-2005-2525 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
280915 - easy_software_products
apple 		cups
mac_os_x 		CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection. NVD-CWE-Other
CVE-2005-2526 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
280916 - maxwebportal maxwebportal SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter. NVD-CWE-Other
CVE-2005-1779 2008-09-6 05:50 2005-05-31 Show GitHub Exploit DB Packet Storm
280917 - mailenable mailenable_enterprise
mailenable_professional 		Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). NVD-CWE-Other
CVE-2005-1781 2008-09-6 05:50 2005-05-31 Show GitHub Exploit DB Packet Storm
280918 - hosting_controller hosting_controller Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp. NVD-CWE-Other
CVE-2005-1784 2008-09-6 05:50 2005-05-27 Show GitHub Exploit DB Packet Storm
280919 - hosting_controller hosting_controller SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter. NVD-CWE-Other
CVE-2005-1788 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
280920 - w.m.r._simpson bookreview Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_revi… NVD-CWE-Other
CVE-2005-1782 2008-09-6 05:50 2005-05-26 Show GitHub Exploit DB Packet Storm