Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 5, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200271 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0735 2012-03-27 18:43 2011-02-1 Show GitHub Exploit DB Packet Storm
200272 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0734 2012-03-27 18:43 2011-02-1 Show GitHub Exploit DB Packet Storm
200273 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0733 2012-03-27 18:43 2011-02-1 Show GitHub Exploit DB Packet Storm
200274 6.5 警告 Canonical
Eucalyptus Systems		 - UEC などで使用される Eucalyptus における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0730 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
200275 7.2 危険 Canonical - language-selector の D-Bus バックエンドにおけるファイルを改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0729 2012-03-27 18:43 2011-04-29 Show GitHub Exploit DB Packet Storm
200276 3.5 注意 michael hudson-doyle - Loggerhead の templatefunctions.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0728 2012-03-27 18:43 2011-03-22 Show GitHub Exploit DB Packet Storm
200277 4.9 警告 Sebastian Heinlein
Canonical		 - Ubuntu の org.debian.apt.UpdateCachePartially メソッドにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0725 2012-03-27 18:43 2011-02-23 Show GitHub Exploit DB Packet Storm
200278 9.3 危険 Canonical - Live DVD for Edubuntu における権限を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-0724 2012-03-27 18:43 2011-02-18 Show GitHub Exploit DB Packet Storm
200279 6.8 警告 MPlayer project
FFmpeg		 - MPlayer などの製品で使用される FFmpeg におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0723 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
200280 6.8 警告 FFmpeg
mplayerhq		 - MPlayer などの製品で使用される FFmpeg におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-0722 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 6, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 5.4 MEDIUM
Network 		- - IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames.  This vulnerability could allow an attacker to gain improper access and perform unauthori… New CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2024-55896 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
62 4.3 MEDIUM
Network 		- - The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justifi… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-12237 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
63 7.3 HIGH
Network 		- - The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute … New CWE-94
Code Injection 		CVE-2024-11733 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
64 - - - In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong. New - CVE-2025-22376 2025-01-4 08:15 2025-01-4 Show GitHub Exploit DB Packet Storm
65 - - - A vulnerability was found in Roxy-WI up to 8.1.3. It has been declared as critical. Affected by this vulnerability is the function action_service of the file app/modules/roxywi/roxy.py. The manipulat… New CWE-78
CWE-77
OS Command 
Command Injection 		CVE-2024-13129 2025-01-4 07:15 2025-01-4 Show GitHub Exploit DB Packet Storm
66 - - - A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0. This issue affects some unknown processing of the file /user/sea… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0198 2025-01-4 06:15 2025-01-4 Show GitHub Exploit DB Packet Storm
67 - - - Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 and prior to versions 13.5.8, 14.2.21, and 15.1.2, Next.js is vulnerable to a Denial of Service (DoS)… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-56332 2025-01-4 06:15 2025-01-4 Show GitHub Exploit DB Packet Storm
68 - - - PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site scripting (XSS) vulnerability in custom properties. The … New - CVE-2024-56410 2025-01-4 06:15 2025-01-4 Show GitHub Exploit DB Packet Storm
69 - - - FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behav… New - CVE-2024-36613 2025-01-4 06:15 2025-01-4 Show GitHub Exploit DB Packet Storm
70 - - - FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function. New - CVE-2024-35365 2025-01-4 06:15 2025-01-4 Show GitHub Exploit DB Packet Storm