Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204671 5 警告 IBM - IBM DB2 におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0710 2012-03-23 11:47 2011-06-10 Show GitHub Exploit DB Packet Storm
204672 6.3 警告 RSAセキュリティ - EMC RSA enVision におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0403 2012-03-23 11:38 2012-03-20 Show GitHub Exploit DB Packet Storm
204673 9.3 危険 RSAセキュリティ - EMC RSA enVision におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-0402 2012-03-23 11:36 2012-03-20 Show GitHub Exploit DB Packet Storm
204674 6.5 警告 RSAセキュリティ - EMC RSA enVision における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0401 2012-03-23 11:28 2012-03-20 Show GitHub Exploit DB Packet Storm
204675 7.9 危険 RSAセキュリティ - EMC RSA enVision におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2012-0400 2012-03-23 11:26 2012-03-20 Show GitHub Exploit DB Packet Storm
204676 4.3 警告 RSAセキュリティ - EMC RSA enVision におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0399 2012-03-23 11:24 2012-03-20 Show GitHub Exploit DB Packet Storm
204677 3.6 注意 Bdale Garbee - as31 におけるファイルを生成または削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-0808 2012-03-22 18:35 2012-03-19 Show GitHub Exploit DB Packet Storm
204678 5 警告 kylegilman - WordPress 用 Video Embed & Thumbnail Generator プラグインにおけるインストールパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1786 2012-03-22 17:48 2012-03-19 Show GitHub Exploit DB Packet Storm
204679 7.5 危険 kylegilman - WordPress 用 Video Embed & Thumbnail Generator プラグインにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1785 2012-03-22 17:47 2012-03-19 Show GitHub Exploit DB Packet Storm
204680 7.5 危険 OddNormality - MyJobList における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1784 2012-03-22 17:46 2012-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 - - - Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuth… - CVE-2025-24860 2025-02-7 05:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1082 - - - SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient sanitization of a user-supplied paramete… - CVE-2025-25064 2025-02-7 05:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1083 4.3 MEDIUM
Network 		mozilla firefox
thunderbird 		The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-1019 2025-02-7 04:40 2025-02-4 Show GitHub Exploit DB Packet Storm
1084 5.3 MEDIUM
Network 		mozilla firefox
thunderbird 		The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability affect… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-1018 2025-02-7 04:40 2025-02-4 Show GitHub Exploit DB Packet Storm
1085 7.5 HIGH
Network 		mozilla firefox
thunderbird 		A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird <… CWE-416
 Use After Free 		CVE-2025-1012 2025-02-7 04:33 2025-02-4 Show GitHub Exploit DB Packet Storm
1086 8.8 HIGH
Network 		mozilla firefox
thunderbird 		A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefo… NVD-CWE-noinfo
CVE-2025-1011 2025-02-7 04:31 2025-02-4 Show GitHub Exploit DB Packet Storm
1087 8.8 HIGH
Network 		mozilla firefox
thunderbird 		An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < … CWE-416
 Use After Free 		CVE-2025-1010 2025-02-7 04:30 2025-02-4 Show GitHub Exploit DB Packet Storm
1088 9.8 CRITICAL
Network 		mozilla firefox
thunderbird 		An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, … CWE-416
 Use After Free 		CVE-2025-1009 2025-02-7 04:28 2025-02-4 Show GitHub Exploit DB Packet Storm
1089 - - - Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log. - CVE-2024-13416 2025-02-7 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1090 - - - An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to reading vaults that have been prev… - CVE-2024-43779 2025-02-7 04:15 2025-02-7 Show GitHub Exploit DB Packet Storm