Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
11 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 New CWE-122
CWE-787
CVE-2025-21139 2025-01-22 12:25 2025-01-14 Show GitHub Exploit DB Packet Storm
12 7.8 重要
Local 		IBM IBM VIOS
IBM AIX 		IBM の IBM VIOS および IBM AIX における OS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2024-47115 2025-01-22 12:18 2024-12-5 Show GitHub Exploit DB Packet Storm
13 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 New CWE-122
CWE-787
CVE-2025-21137 2025-01-22 12:11 2025-01-14 Show GitHub Exploit DB Packet Storm
14 7.5 重要
Network 		株式会社アイ・オー・データ機器 UD-LT2 ファームウェア アイ・オー・データ製ルーターUD-LT2における複数の脆弱性 New CWE-78
CWE-Other
CVE-2025-20617
CVE-2025-22450
CVE-2025-23237 		2025-01-22 12:08 2025-01-22 Show GitHub Exploit DB Packet Storm
15 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2025-21136 2025-01-22 11:49 2025-01-14 Show GitHub Exploit DB Packet Storm
16 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2025-21138 2025-01-22 11:49 2025-01-14 Show GitHub Exploit DB Packet Storm
17 7.8 重要
Local 		アドビシステムズ Adobe Illustrator アドビの Ipad Os 用 Adobe Illustrator における整数アンダーフローの脆弱性 New CWE-191
整数アンダーフロー 		CVE-2025-21133 2025-01-22 11:34 2025-01-14 Show GitHub Exploit DB Packet Storm
18 5.3 警告
Network 		ヒューレット・パッカード
シスコシステムズ
Digi International Inc. 		 Cisco NX-OS
X3220NR ファームウェア
Saros 		複数の IP 標準で IP カプセル化を実装する製品におけるスプーフィングによる認証回避に関する脆弱性 Update CWE-290
スプーフィングによる認証回避 		CVE-2020-10136 2025-01-22 11:18 2020-06-2 Show GitHub Exploit DB Packet Storm
19 8.8 重要
Network 		RadiusTheme Classified Listing - Classified Ads & Business Directory Plugin RadiusTheme の WordPress 用 Classified Listing - Classified ads & Business Directory Plugin におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-1315 2025-01-22 11:16 2024-04-9 Show GitHub Exploit DB Packet Storm
20 3.3 低
Local 		Termius Corporation Termius Termius Corporation の Termius における信頼できない検索パスに関する脆弱性 New CWE-426
信頼性のない検索パス 		CVE-2024-55503 2025-01-22 11:05 2024-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274971 - itaka itaka Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensitive information by downloading screenshots via a direct request for /screenshot. NVD-CWE-Other
CVE-2007-3964 2008-11-15 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
274972 - ufmod ufmod_xm_player_library Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments. NVD-CWE-Other
CVE-2007-3965 2008-11-15 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
274973 - ufmod ufmod_xm_player_library The vendor has addressed this issue through an updated product release: http://sourceforge.net/projects/ufmod/ NVD-CWE-Other
CVE-2007-3965 2008-11-15 15:54 2007-07-26 Show GitHub Exploit DB Packet Storm
274974 - dar dar The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make_ivec function in libdar/crypto.cpp that results in predictable and repeat… NVD-CWE-Other
CVE-2007-3528 2008-11-15 15:53 2007-07-4 Show GitHub Exploit DB Packet Storm
274975 - wordpress wordpress
wordpress_mu 		Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifi… NVD-CWE-Other
CVE-2007-3543 2008-11-15 15:53 2007-07-4 Show GitHub Exploit DB Packet Storm
274976 - wordpress wordpress
wordpress_mu 		Successful exploitation requires valid Editor credentials and that the system is configured to allow uploads. NVD-CWE-Other
CVE-2007-3543 2008-11-15 15:53 2007-07-4 Show GitHub Exploit DB Packet Storm
274977 - jedox palo The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugi… NVD-CWE-Other
CVE-2007-3581 2008-11-15 15:53 2007-07-6 Show GitHub Exploit DB Packet Storm
274978 - vtiger vtiger_crm vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when they only have the View permission. NVD-CWE-Other
CVE-2007-3599 2008-11-15 15:53 2007-07-7 Show GitHub Exploit DB Packet Storm
274979 - vtiger vtiger_crm WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as… NVD-CWE-Other
CVE-2007-3600 2008-11-15 15:53 2007-07-7 Show GitHub Exploit DB Packet Storm
274980 - vtiger vtiger_crm vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' calendar activities via a (1) home page or (2) event list view. NVD-CWE-Other
CVE-2007-3601 2008-11-15 15:53 2007-07-7 Show GitHub Exploit DB Packet Storm