Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 17, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201031 9.3 危険 X.Org Foundation
サイバートラスト株式会社
レッドハット
- X.Org の xrdb.c における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0465 2012-04-17 17:13 2011-03-1 Show GitHub Exploit DB Packet Storm
201032 5 警告 PNG Development Group - libpng の png_err 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-2691 2012-04-17 17:09 2011-07-17 Show GitHub Exploit DB Packet Storm
201033 5 警告 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバにおけるサービス運用妨害 (リソース消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1809 2012-04-17 16:52 2012-04-11 Show GitHub Exploit DB Packet Storm
201034 10 危険 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバおける不特定の機能を実行される脆弱性 CWE-287
不適切な認証
CVE-2012-1808 2012-04-17 16:52 2012-04-11 Show GitHub Exploit DB Packet Storm
201035 4.3 警告 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1807 2012-04-17 16:51 2012-04-11 Show GitHub Exploit DB Packet Storm
201036 7.5 危険 光洋電子工業 - 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2012-1806 2012-04-17 16:50 2012-04-11 Show GitHub Exploit DB Packet Storm
201037 10 危険 光洋電子工業 - 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1805 2012-04-17 16:47 2012-04-11 Show GitHub Exploit DB Packet Storm
201038 7.5 危険 libarchive - libarchive におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1779 2012-04-17 16:46 2012-04-13 Show GitHub Exploit DB Packet Storm
201039 7.5 危険 libarchive - libarchive におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4666 2012-04-17 16:29 2012-04-13 Show GitHub Exploit DB Packet Storm
201040 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird における権限を取得される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3655 2012-04-16 18:09 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 - - - Server-Side Request Forgery (SSRF) vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 throu… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-22346 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
542 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AGILELOGIX Free Google Maps allows Stored XSS.This issue affects Free Google Maps: from n/a throu… New CWE-79
Cross-site Scripting
CVE-2025-22329 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
543 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in galleryape Photo Gallery – Image Gallery by Ape allows Reflected XSS.This issue affects Photo Gal… New CWE-79
Cross-site Scripting
CVE-2025-22317 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
544 - - - Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which … New - CVE-2025-21088 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
545 - - - A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by u… New CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-8603 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
546 - - - Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 5.5.6. New CWE-862
 Missing Authorization
CVE-2024-56295 2025-01-16 01:15 2025-01-16 Show GitHub Exploit DB Packet Storm
547 - - - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impa… New - CVE-2025-23073 2025-01-16 01:15 2025-01-15 Show GitHub Exploit DB Packet Storm
548 - - - Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) and Identity (0x4), the success flag of the call is not checked. As a consequence… New - CVE-2025-21607 2025-01-16 01:15 2025-01-15 Show GitHub Exploit DB Packet Storm
549 - - - An issue in the qi_inst_state_free component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Update - CVE-2024-57650 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm
550 - - - An issue in the qst_vec_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Update - CVE-2024-57649 2025-01-16 01:15 2025-01-14 Show GitHub Exploit DB Packet Storm