Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204491 1.9 注意 IBM - IBM TFIM における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2009-5084 2012-03-27 18:42 2011-08-12 Show GitHub Exploit DB Packet Storm
204492 6.8 警告 IBM - IBM TFIM における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-5083 2012-03-27 18:42 2011-08-12 Show GitHub Exploit DB Packet Storm
204493 3.3 注意 GNU Project - GNU troff の configure などのスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-5082 2012-03-27 18:42 2011-06-30 Show GitHub Exploit DB Packet Storm
204494 3.3 注意 GNU Project - GNU troff の config.guess などのスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-5081 2012-03-27 18:42 2011-06-30 Show GitHub Exploit DB Packet Storm
204495 3.3 注意 GNU Project - GNU troff の contrib/eqn2graph/eqn2graph.sh などのスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-5080 2012-03-27 18:42 2011-06-30 Show GitHub Exploit DB Packet Storm
204496 3.3 注意 GNU Project - GNU troff の gendef.sh などのスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-5079 2012-03-27 18:42 2011-06-30 Show GitHub Exploit DB Packet Storm
204497 7.5 危険 creloaded - CRE Loaded における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-5077 2012-03-27 18:42 2011-06-8 Show GitHub Exploit DB Packet Storm
204498 7.5 危険 creloaded - CRE Loaded における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-5076 2012-03-27 18:42 2011-06-8 Show GitHub Exploit DB Packet Storm
204499 4.3 警告 monkeysaudio - Monkey's Audio におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5075 2012-03-27 18:42 2011-05-20 Show GitHub Exploit DB Packet Storm
204500 10 危険 mojolicious - Mojolicious の MojoX::Dispatcher::Static の実装における脆弱性 CWE-noinfo
情報不足 		CVE-2009-5074 2012-03-27 18:42 2011-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
821 - - - The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution. - CVE-2024-44142 2025-02-2 19:15 2025-01-31 Show GitHub Exploit DB Packet Storm
822 - - - NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read  a buffer with an incorrect length. A successful exploit of this vulnerability … CWE-805
 Buffer Access with Incorrect Length Value 		CVE-2024-0131 2025-02-2 10:15 2025-02-2 Show GitHub Exploit DB Packet Storm
823 3.5 LOW
Network 		- - A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /_parse/load_job-details.ph… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-0961 2025-02-2 08:15 2025-02-2 Show GitHub Exploit DB Packet Storm
824 6.3 MEDIUM
Network 		- - A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown functionality of the file expview.php. The ma… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0947 2025-02-2 02:15 2025-02-2 Show GitHub Exploit DB Packet Storm
825 5.4 MEDIUM
Network 		- - The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajax_delete_message', 'ajax_get_customers_par… CWE-862
 Missing Authorization 		CVE-2024-13775 2025-02-1 22:15 2025-02-1 Show GitHub Exploit DB Packet Storm
826 6.4 MEDIUM
Network 		- - The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'better_messages_live_… CWE-79
Cross-site Scripting 		CVE-2024-13612 2025-02-1 22:15 2025-02-1 Show GitHub Exploit DB Packet Storm
827 5.4 MEDIUM
Network 		- - The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including,… CWE-862
 Missing Authorization 		CVE-2024-12825 2025-02-1 17:15 2025-02-1 Show GitHub Exploit DB Packet Storm
828 - - - An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update. - CVE-2025-23091 2025-02-1 16:15 2025-02-1 Show GitHub Exploit DB Packet Storm
829 6.3 MEDIUM
Network 		- - The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 1.6.2. This ma… CWE-862
 Missing Authorization 		CVE-2025-0939 2025-02-1 16:15 2025-02-1 Show GitHub Exploit DB Packet Storm
830 6.5 MEDIUM
Network 		- - The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to in… CWE-89
SQL Injection 		CVE-2024-13341 2025-02-1 16:15 2025-02-1 Show GitHub Exploit DB Packet Storm