Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201831 3.3 注意 Gajim.org - Gajim の src/common/latex.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-2093 2012-06-20 16:45 2012-04-10 Show GitHub Exploit DB Packet Storm
201832 9.3 危険 マイクロソフト - Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0141 2012-06-20 16:29 2012-05-8 Show GitHub Exploit DB Packet Storm
201833 7.5 危険 Mozilla Foundation - 複数の Mozilla 製品の nsHTMLSelectElement 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3671 2012-06-20 15:24 2012-06-18 Show GitHub Exploit DB Packet Storm
201834 3.6 注意 MantisBT Group - MantisBT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2692 2012-06-20 15:15 2012-06-2 Show GitHub Exploit DB Packet Storm
201835 7.5 危険 MantisBT Group - MantisBT の mc_issue_note_update 関数における任意の bugnote を編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2691 2012-06-20 15:09 2012-06-3 Show GitHub Exploit DB Packet Storm
201836 7.5 危険 PyPam - PyPam の PAMmodule.c 内の PyPAM_conv におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1502 2012-06-20 14:22 2012-06-16 Show GitHub Exploit DB Packet Storm
201837 5 警告 レッドハット - Red Hat Network Satellite におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2012-1145 2012-06-20 13:56 2012-03-29 Show GitHub Exploit DB Packet Storm
201838 5 警告 GNU Project - Gnash の plugin/npapi/plugin.cpp における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4328 2012-06-20 10:35 2012-06-16 Show GitHub Exploit DB Packet Storm
201839 7.5 危険 Ryan Tomayko - Rack::Cache rubygem における重要なクッキー情報を取得される脆弱性 CWE-DesignError
CVE-2012-2671 2012-06-20 10:19 2012-06-17 Show GitHub Exploit DB Packet Storm
201840 6.5 警告 Open Dynamics - Collabtive の manageuser.php におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2670 2012-06-20 10:18 2012-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1601 5.4 MEDIUM
Network 		- - A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads… CWE-22
Path Traversal 		CVE-2025-1106 2025-02-8 04:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1602 - - - Tiny File Manager v2.4.7 and below is vulnerable to session fixation. - CVE-2022-40916 2025-02-8 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1603 4.3 MEDIUM
Network 		- - A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP … CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1105 2025-02-8 03:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1604 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2025-0307 2025-02-8 03:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1605 7.3 HIGH
Network 		- - A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack c… CWE-287
CWE-290
Improper Authentication
 Authentication Bypass by Spoofing 		CVE-2025-1104 2025-02-8 02:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1606 - - - An improper access control vulnerability may allow privilege escalation.This issue affects:  * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior;  * ELI 280/BUR280/MLBUR 280 Restin… - CVE-2022-26389 2025-02-8 02:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1607 - - - A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electroca… - CVE-2022-26388 2025-02-8 02:15 2025-02-8 Show GitHub Exploit DB Packet Storm
1608 - - - Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) passwor… - CVE-2024-57587 2025-02-8 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1609 - - - Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardc… - CVE-2024-53356 2025-02-8 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1610 4.3 MEDIUM
Network 		- - The WP All Import Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.7. This is due to missing nonce validation on the delete_and_edit func… CWE-352
 Origin Validation Error 		CVE-2024-9661 2025-02-8 01:15 2025-02-8 Show GitHub Exploit DB Packet Storm