Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 2:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202581 4.3 警告 flock - Flock Browser におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3202 2012-03-27 18:42 2010-09-13 Show GitHub Exploit DB Packet Storm
202582 4.3 警告 マイクロソフト - Microsoft Word 2003 SP3 の MSO.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-3200 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
202583 9.3 危険 tigris - TortoiseSVN における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3199 2012-03-27 18:42 2010-08-30 Show GitHub Exploit DB Packet Storm
202584 5 警告 GNU Project - GNU C Library の 特定の実行時メモリ保護機能におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3192 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
202585 2.6 注意 Mozilla Foundation - Bugzilla における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3172 2012-03-27 18:42 2010-11-5 Show GitHub Exploit DB Packet Storm
202586 7.2 危険 Novell - SUSE Linux Enterprise および openSUSE の Novell Client novfs モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3110 2012-03-27 18:42 2010-10-12 Show GitHub Exploit DB Packet Storm
202587 5.1 警告 jianping yu - pidgin-knotify プラグインの notify 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3088 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
202588 6.8 警告 Novell
LibTIFF		 - SUSE openSUSE の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-3087 2012-03-27 18:42 2010-09-21 Show GitHub Exploit DB Packet Storm
202589 10 危険 david shadoff - Mednafen の network-play 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3085 2012-03-27 18:42 2010-05-29 Show GitHub Exploit DB Packet Storm
202590 4.3 警告 Apache Software Foundation
レッドハット		 - Red Hat Enterprise MRG などで使用される Apache Qpid の sys/ssl/SslSocket.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-3083 2012-03-27 18:42 2010-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 - - - A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/categories/update. The manipulation of the arg… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-0400 2025-01-13 08:15 2025-01-13 Show GitHub Exploit DB Packet Storm
832 - - - A vulnerability was found in StarSea99 starsea-mall 1.0. It has been declared as critical. This vulnerability affects the function UploadController of the file src/main/java/com/siro/mall/controller/… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-0399 2025-01-13 08:15 2025-01-13 Show GitHub Exploit DB Packet Storm
833 - - - HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel t… - CVE-2024-42181 2025-01-13 07:15 2025-01-13 Show GitHub Exploit DB Packet Storm
834 - - - HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special chara… - CVE-2024-42180 2025-01-13 07:15 2025-01-13 Show GitHub Exploit DB Packet Storm
835 - - - HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API/2.0 as the server's name & version. - CVE-2024-42179 2025-01-13 07:15 2025-01-13 Show GitHub Exploit DB Packet Storm
836 - - - A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-0398 2025-01-12 23:15 2025-01-12 Show GitHub Exploit DB Packet Storm
837 5.9 MEDIUM
Network 		- - IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks. CWE-780
CVE-2024-51456 2025-01-12 23:15 2025-01-12 Show GitHub Exploit DB Packet Storm
838 - - - A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads t… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-0397 2025-01-12 22:15 2025-01-12 Show GitHub Exploit DB Packet Storm
839 - - - A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulat… CWE-77
CWE-74
Command Injection
Injection 		CVE-2025-0396 2025-01-12 21:15 2025-01-12 Show GitHub Exploit DB Packet Storm
840 5.4 MEDIUM
Network 		- - IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary J… CWE-79
Cross-site Scripting 		CVE-2024-49785 2025-01-12 11:15 2025-01-12 Show GitHub Exploit DB Packet Storm