Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202601 4.3 警告 Python Paste - Paste の paste.httpexceptions 実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2477 2012-03-27 18:42 2010-06-24 Show GitHub Exploit DB Packet Storm
202602 4.3 警告 Synology Inc. - Synology Disk Station におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2453 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
202603 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Territory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2418 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202604 4 警告 オラクル - Oracle Supply Chain Products Suite の Agile PLM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2417 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202605 4.3 警告 オラクル - Oracle E-Business Suite の Oracle E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2416 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202606 2.6 注意 オラクル - Oracle Sun Products Suite の Sun Convergence および Sun Java Communications Suite コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2414 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202607 4.3 警告 オラクル - Oracle Fusion Middleware の BI Publisher コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2413 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202608 4.3 警告 オラクル - Oracle E-Business Suite の Oracle iRecruitment コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2408 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202609 4 警告 オラクル - Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2406 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
202610 6 警告 オラクル - Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2405 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2. - CVE-2024-13293 2025-01-11 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
572 - - - Incorrect Authorization vulnerability in Drupal Basic HTTP Authentication allows Forceful Browsing.This issue affects Basic HTTP Authentication: from 7.X-1.0 before 7.X-1.4. - CVE-2024-13291 2025-01-11 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
573 9.8 CRITICAL
Network 		campcodes school_faculty_scheduling_system A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipula… NVD-CWE-Other
CVE-2025-0211 2025-01-11 04:02 2025-01-5 Show GitHub Exploit DB Packet Storm
574 9.8 CRITICAL
Network 		campcodes student_grading_system A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /view_students.php. The manipulation of the argument id… CWE-89
SQL Injection 		CVE-2025-0212 2025-01-11 03:57 2025-01-5 Show GitHub Exploit DB Packet Storm
575 9.8 CRITICAL
Network 		campcodes project_management_system A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-0213 2025-01-11 03:55 2025-01-5 Show GitHub Exploit DB Packet Storm
576 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: put bpf_link's program when link is safe to be deallocated In general, BPF link's underlying BPF program should be considere… NVD-CWE-noinfo
CVE-2024-56786 2025-01-11 03:53 2025-01-9 Show GitHub Exploit DB Packet Storm
577 - - - During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms.  Publicl… - CVE-2024-6880 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
578 - - - Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user cou… - CVE-2024-6662 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
579 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. - CVE-2024-57228 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
580 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. - CVE-2024-57227 2025-01-11 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm