Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205481 4 警告 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3573 2012-01-23 10:58 2012-01-17 Show GitHub Exploit DB Packet Storm
205482 4.6 警告 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3565 2012-01-23 10:56 2012-01-17 Show GitHub Exploit DB Packet Storm
205483 2.1 注意 オラクル - Oracle GlassFish Enterprise Server における認証の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3564 2012-01-23 10:42 2012-01-17 Show GitHub Exploit DB Packet Storm
205484 3.7 注意 オラクル - Oracle GlassFish Server における認証の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0081 2012-01-23 10:33 2012-01-17 Show GitHub Exploit DB Packet Storm
205485 5 警告 オラクル - Oracle GlassFish Server における Web Container の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0104 2012-01-23 10:32 2012-01-17 Show GitHub Exploit DB Packet Storm
205486 1.9 注意 オラクル - Oracle Solaris における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0098 2012-01-23 10:25 2012-01-17 Show GitHub Exploit DB Packet Storm
205487 2.1 注意 オラクル - Oracle Solaris における ksh93 シェルの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0097 2012-01-23 10:16 2012-01-17 Show GitHub Exploit DB Packet Storm
205488 2.6 注意 オラクル - Oracle Solaris における sshd の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0099 2012-01-23 10:13 2012-01-17 Show GitHub Exploit DB Packet Storm
205489 3.6 注意 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0109 2012-01-23 10:09 2012-01-17 Show GitHub Exploit DB Packet Storm
205490 4.9 警告 オラクル - Oracle Solaris における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0103 2012-01-23 10:04 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1901 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tarak Patel WP Query Creator allows Reflected XSS. This issue affects WP Query Creator: from n/a … CWE-79
Cross-site Scripting 		CVE-2025-22264 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1902 - - - It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authenticatio… CWE-287
Improper Authentication 		CVE-2025-0637 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1903 - - - SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server. - CVE-2024-55971 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1904 - - - ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection. - CVE-2024-52325 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1905 - - - The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles whil… - CVE-2024-10846 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
1906 - - - A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. - CVE-2025-24403 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1907 - - - A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs o… - CVE-2025-24402 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1908 - - - Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (t… - CVE-2025-24401 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1909 - - - Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. - CVE-2025-24398 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
1910 - - - A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS)… - CVE-2024-24424 2025-01-24 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm