Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202561 4.3 警告 Tincan - phpList におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1682 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
202562 3.3 注意 VMware - VMware Open Virtual Machine Tools の vmware-hgfsmounter におけるファイルの破損を誘発される脆弱性 CWE-16
環境設定
CVE-2011-1681 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202563 4.4 警告 ncpfs - ncpfs の ncpmount における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1680 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202564 5 警告 metaways - Metaways Tine における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1666 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202565 5 警告 phpboost - PHPBoost におけるバックアップの SQL ファイルを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1665 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202566 6.8 警告 icanlocalize - Translation Management モジュール におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1664 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202567 7.5 危険 icanlocalize - Translation Management モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1663 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202568 4.3 警告 icanlocalize - Translation Management モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1662 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202569 3.3 注意 ncpfs - ncpfs における /etc/mtab ファイルの破損を誘発する脆弱性 CWE-16
環境設定
CVE-2011-1679 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
202570 4.6 警告 kernel.org - util-linux の mount における脆弱性 CWE-16
環境設定
CVE-2011-1677 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. It could allow a malicious operator to attempt to download files using the file:// URI scheme. - CVE-2024-42184 2025-01-23 12:15 2025-01-23 Show GitHub Exploit DB Packet Storm
482 6.4 MEDIUM
Network
- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alt… CWE-79
Cross-site Scripting
CVE-2023-50309 2025-01-23 12:15 2025-01-23 Show GitHub Exploit DB Packet Storm
483 4.6 MEDIUM
Network
- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t… CWE-79
Cross-site Scripting
CVE-2023-32340 2025-01-23 12:15 2025-01-23 Show GitHub Exploit DB Packet Storm
484 - - - BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or al… - CVE-2024-42183 2025-01-23 11:15 2025-01-23 Show GitHub Exploit DB Packet Storm
485 - - - BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability. It may allow the application to download files from an internally hosted server on localhost. - CVE-2024-42182 2025-01-23 10:15 2025-01-23 Show GitHub Exploit DB Packet Storm
486 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: Add NULL check in ads1298_init devm_kasprintf() can return a NULL pointer on failure. A check on the return… CWE-476
 NULL Pointer Dereference
CVE-2024-57944 2025-01-23 08:02 2025-01-21 Show GitHub Exploit DB Packet Storm
487 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid extent tree [BUG] Syzbot reported a crash with the following call trace: BTR… CWE-476
 NULL Pointer Dereference
CVE-2025-21658 2025-01-23 08:02 2025-01-21 Show GitHub Exploit DB Packet Storm
488 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, on… CWE-190
 Integer Overflow or Wraparound
CVE-2024-57938 2025-01-23 08:01 2025-01-21 Show GitHub Exploit DB Packet Storm
489 6.4 MEDIUM
Network
- - The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient input sanitization an… CWE-79
Cross-site Scripting
CVE-2024-12477 2025-01-23 07:15 2025-01-23 Show GitHub Exploit DB Packet Storm
490 - - - Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification. - CVE-2024-57545 2025-01-23 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm