Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 12:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201561 6.9 警告 ヒューレット・パッカード - HP OpenVMS の ACMELOGIN の実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2010 2012-05-22 11:14 2012-05-17 Show GitHub Exploit DB Packet Storm
201562 9.3 危険 アドビシステムズ - Adobe Photoshop におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2028 2012-05-21 17:08 2012-05-8 Show GitHub Exploit DB Packet Storm
201563 10 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0780 2012-05-21 17:06 2012-05-8 Show GitHub Exploit DB Packet Storm
201564 2.6 注意 Lunascape - iLunascape for Android における WebView クラスに関する脆弱性 CWE-Other
その他 		CVE-2012-1249 2012-05-21 12:01 2012-05-21 Show GitHub Exploit DB Packet Storm
201565 5 警告 Python Software Foundation - Python の asyncore モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-3492 2012-05-18 16:50 2010-08-14 Show GitHub Exploit DB Packet Storm
201566 3.3 注意 freedesktop.org - D-Bus の configure スクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-2533 2012-05-18 16:47 2011-06-22 Show GitHub Exploit DB Packet Storm
201567 4.6 警告 D-Bus
レッドハット		 - Linux Kernel の dbus-marshal-header.c 内にある _dbus_header_byteswap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2200 2012-05-18 16:45 2011-06-10 Show GitHub Exploit DB Packet Storm
201568 9.3 危険 アップル
FreeType Project
レッドハット		 - Apple iOS などの製品で使用される FreeType における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2011-0226 2012-05-18 16:42 2011-07-8 Show GitHub Exploit DB Packet Storm
201569 7.2 危険 Linux - Linux Kernel の HFS Plus ファイルシステムの実装におけるバッファオーバーフローの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2319 2012-05-18 16:32 2012-05-17 Show GitHub Exploit DB Packet Storm
201570 7.2 危険 Linux - Linux kernel の cap_bprm_set_creds 関数におけるパーソナリティ (personality) の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2123 2012-05-18 16:31 2012-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
971 - - - Vite is a frontend tooling framework for javascript. Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of validation… CWE-346
CWE-350
CWE-1385
 Origin Validation Error
 Reliance on Reverse DNS Resolution for a Security-Critical Action
 Missing Origin Validation in WebSockets 		CVE-2025-24010 2025-01-21 01:15 2025-01-21 Show GitHub Exploit DB Packet Storm
972 - - - PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the … CWE-352
 Origin Validation Error 		CVE-2025-23044 2025-01-21 01:15 2025-01-21 Show GitHub Exploit DB Packet Storm
973 - - - gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them ap… CWE-281
CWE-687
 Improper Preservation of Permissions
 Function Call With Incorrectly Specified Argument Value 		CVE-2025-22620 2025-01-21 01:15 2025-01-21 Show GitHub Exploit DB Packet Storm
974 - - - PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays … CWE-79
Cross-site Scripting 		CVE-2025-22131 2025-01-21 01:15 2025-01-21 Show GitHub Exploit DB Packet Storm
975 - - - Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack,… CWE-476
CWE-305
CWE-841
 NULL Pointer Dereference
 Authentication Bypass by Primary Weakness
 Improper Enforcement of Behavioral Workflow 		CVE-2024-51738 2025-01-21 01:15 2025-01-21 Show GitHub Exploit DB Packet Storm
976 5.6 MEDIUM
Network 		- - IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without pri… CWE-620
 Unverified Password Change 		CVE-2024-45647 2025-01-21 00:15 2025-01-21 Show GitHub Exploit DB Packet Storm
977 - - - WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini. - CVE-2025-24337 2025-01-20 23:15 2025-01-20 Show GitHub Exploit DB Packet Storm
978 - - - In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_eventfd_do_signal() is invoked from an RCU callback, bu… - CVE-2025-21655 2025-01-20 23:15 2025-01-20 Show GitHub Exploit DB Packet Storm
979 - - - This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmi… CWE-1004
CWE-614
 Sensitive Cookie Without 'HttpOnly' Flag
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 		CVE-2025-0479 2025-01-20 21:15 2025-01-20 Show GitHub Exploit DB Packet Storm
980 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: adapt set backend to use GC transaction API Use the GC transaction API to replace the old and buggy gc API … - CVE-2023-52923 2025-01-20 20:15 2025-01-20 Show GitHub Exploit DB Packet Storm