Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202371	7.5	危険	Google	-	Google Chrome の Cascading Style Sheets 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3051	2012-03-27 13:57	2012-03-21	Show	GitHub Exploit DB Packet Storm

202372	6.8	警告	Google	-	Google Chrome で使用される libpng の pngrutil.c における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3045	2012-03-27 13:53	2012-03-21	Show	GitHub Exploit DB Packet Storm

202373	6.4	警告	日本電気 IBM 富士通サイバートラスト株式会社 NTP Project サン・マイクロシステムズヒューレット・パッカードインターネットイニシアティブオラクルレッドハット	-	NTP におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2009-3563	2012-03-27 11:37	2009-12-9	Show	GitHub Exploit DB Packet Storm

202374	6.8	警告	アップルサイバートラスト株式会社 NTP Project ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	NTP の ntpq における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0159	2012-03-27 11:35	2009-04-14	Show	GitHub Exploit DB Packet Storm

202375	5	警告	アップルサイバートラスト株式会社レッドハットオラクル NTP Project	-	NTP における証明書チェーンの有効性を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0021	2012-03-27 11:01	2009-01-7	Show	GitHub Exploit DB Packet Storm

202376	5	警告	アップルサイバートラスト株式会社 PNG Development Group オラクル VMware レッドハット	-	libpng に含まれる pngrutil.c におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-2249	2012-03-27 10:32	2010-06-26	Show	GitHub Exploit DB Packet Storm

202377	7.5	危険	アップルサイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社レッドハット	-	libpng に脆弱性	CWE-119 バッファエラー	CVE-2010-1205	2012-03-27 10:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

202378	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

202379	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

202380	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
901	6.1	MEDIUM Network	phpgurukul	land_record_system	A vulnerability was found in PHPGurukul Land Record System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/search-property.php. The manipulation o…	CWE-79 Cross-site Scripting	CVE-2024-13082	2025-01-6 23:46	2025-01-1	Show	GitHub Exploit DB Packet Storm

902	5.4	MEDIUM Network	phpgurukul	land_record_system	A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument A…	CWE-79 Cross-site Scripting	CVE-2024-13083	2025-01-6 23:45	2025-01-1	Show	GitHub Exploit DB Packet Storm

903	9.8	CRITICAL Network	phpgurukul	land_record_system	A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search-property.php. The manipulat…	CWE-89 SQL Injection	CVE-2024-13084	2025-01-6 23:44	2025-01-1	Show	GitHub Exploit DB Packet Storm

904	9.8	CRITICAL Network	phpgurukul	land_record_system	A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipula…	CWE-89 SQL Injection	CVE-2024-13085	2025-01-6 23:43	2025-01-1	Show	GitHub Exploit DB Packet Storm

905	-		-	-	OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to inject unexpected arbitrary data into third-party executables or plug-ins.	-	CVE-2024-5594	2025-01-6 23:15	2025-01-6	Show	GitHub Exploit DB Packet Storm

906	-		-	-	The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks	-	CVE-2024-12311	2025-01-6 23:15	2025-01-6	Show	GitHub Exploit DB Packet Storm

907	-		-	-	The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks	-	CVE-2024-12302	2025-01-6 23:15	2025-01-6	Show	GitHub Exploit DB Packet Storm

908	-		-	-	The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even w…	-	CVE-2024-11849	2025-01-6 23:15	2025-01-6	Show	GitHub Exploit DB Packet Storm

909	-		-	-	The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting att…	-	CVE-2024-11356	2025-01-6 23:15	2025-01-6	Show	GitHub Exploit DB Packet Storm

910	3.9	LOW Physics	-	-	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection.This issue affects Pardus …	CWE-78 OS Command	CVE-2024-12970	2025-01-6 21:15	2025-01-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed