Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 3, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200931 6.8 警告 FFmpeg
mplayerhq		 - MPlayer などの製品で使用される FFmpeg におけるサービス運用妨害 (DoS) 状態の脆弱性 CWE-119
バッファエラー 		CVE-2010-3908 2012-03-27 18:42 2011-05-20 Show GitHub Exploit DB Packet Storm
200932 6 警告 Vtiger - vtiger CRM の config.template.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3909 2012-03-27 18:42 2010-11-26 Show GitHub Exploit DB Packet Storm
200933 9.3 危険 VideoLAN - VideoLAN VLC Media Player の Real demuxer プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3907 2012-03-27 18:42 2010-12-14 Show GitHub Exploit DB Packet Storm
200934 7.5 危険 Eucalyptus Systems - Eucalyptus の管理者のインターフェース のパスワードリセット機能における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-3905 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
200935 5 警告 infradead - OpenConnect におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-3903 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
200936 5 警告 infradead - OpenConnect における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3902 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
200937 6.4 警告 infradead - OpenConnect における任意の AnyConnect SSL VPN サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3901 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
200938 5.8 警告 christian dywan - Midori における任意の HTTPS Web サイトになりすまされる脆弱性 CWE-Other
その他 		CVE-2010-3900 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
200939 5 警告 IBM - IBM OmniFind におけるサービス運用妨害 (DoS) 状態となる脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3899 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
200940 5 警告 IBM - IBM OmniFind における認証を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3898 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 4, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 - - - Cross-Site Request Forgery (CSRF) vulnerability in Marsian i-amaze allows Cross Site Request Forgery.This issue affects i-amaze: from n/a through 1.3.7. New CWE-352
 Origin Validation Error 		CVE-2024-38731 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
82 - - - Cross-Site Request Forgery (CSRF) vulnerability in Creativthemes Point allows Cross Site Request Forgery.This issue affects Point: from n/a through 1.1. New CWE-352
 Origin Validation Error 		CVE-2024-37931 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
83 - - - Cross-Site Request Forgery (CSRF) vulnerability in BUDDYBOSS LLC BuddyBoss Theme allows Cross Site Request Forgery.This issue affects BuddyBoss Theme: from n/a through 2.4.61. New CWE-352
 Origin Validation Error 		CVE-2024-37925 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
84 - - - Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop Schema Lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through 1.2.2. New CWE-352
 Origin Validation Error 		CVE-2024-37452 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
85 - - - Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a befor… New CWE-352
 Origin Validation Error 		CVE-2024-37438 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
86 - - - Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager - Resume Manager allows Cross Site Request Forgery.This issue affects WP Job Manager - Resume Manager: from n/a through 2.… New CWE-352
 Origin Validation Error 		CVE-2024-37241 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
87 - - - Cross-Site Request Forgery (CSRF) vulnerability in FS-code FS Poster allows Cross Site Request Forgery.This issue affects FS Poster: from n/a through 6.5.8. New CWE-352
 Origin Validation Error 		CVE-2024-37237 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
88 - - - A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file… New CWE-287
Improper Authentication 		CVE-2024-13111 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
89 - - - A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/… New CWE-200
CWE-284
Information Exposure
Improper Access Control 		CVE-2024-13110 2025-01-2 23:15 2025-01-2 Show GitHub Exploit DB Packet Storm
90 - - - In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and page… Update - CVE-2024-56710 2025-01-2 23:15 2024-12-29 Show GitHub Exploit DB Packet Storm