Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205771 4.3 警告 Ecava - Ecava IntegraXor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2958 2011-12-22 11:02 2011-06-9 Show GitHub Exploit DB Packet Storm
205772 6.9 警告 Rockwell Automation - Rockwell Automation FactoryTalk Diagnostics Viewer における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-2957 2011-12-22 11:01 2011-07-28 Show GitHub Exploit DB Packet Storm
205773 7.8 危険 AzeoTech, Inc. - AzeoTech DAQFactory におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2011-2956 2011-12-22 11:00 2011-07-28 Show GitHub Exploit DB Packet Storm
205774 9.3 危険 Rockwell Automation - Rockwell Automation RSLinx Classic におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2530 2011-12-22 11:00 2011-06-22 Show GitHub Exploit DB Packet Storm
205775 10 危険 Invensys - Invensys Wonderware InBatch の lm_tcp service におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4557 2011-12-22 10:54 2010-12-14 Show GitHub Exploit DB Packet Storm
205776 7.8 危険 Stichting NLnet Labs - Unbound の validator/val_nsec3.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-4869 2011-12-21 15:48 2011-12-20 Show GitHub Exploit DB Packet Storm
205777 6.8 警告 D-Link Systems, Inc. - D-Link DIR-300 ルータにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-4723 2011-12-21 15:36 2011-12-20 Show GitHub Exploit DB Packet Storm
205778 10 危険 Schneider Electric - NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4861 2011-12-21 15:30 2011-12-12 Show GitHub Exploit DB Packet Storm
205779 10 危険 Schneider Electric - NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2011-4860 2011-12-21 15:29 2011-12-12 Show GitHub Exploit DB Packet Storm
205780 10 危険 Schneider Electric - Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性 CWE-DesignError
CVE-2011-4859 2011-12-21 15:28 2011-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 6.6 MEDIUM
Physics
google android In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional ex… New CWE-787
 Out-of-bounds Write
CVE-2025-20642 2025-02-5 00:20 2025-02-3 Show GitHub Exploit DB Packet Storm
172 3.9 LOW
Physics
google android In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor ha… New CWE-125
Out-of-bounds Read
CVE-2025-20643 2025-02-5 00:19 2025-02-3 Show GitHub Exploit DB Packet Storm
173 - - - Improper Control of Generation of Code ('Code Injection') vulnerability in WPSpins Post/Page Copying Tool allows Remote Code Inclusion. This issue affects Post/Page Copying Tool: from n/a through 2.0… New CWE-94
Code Injection
CVE-2025-24677 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
174 - - - Incorrect Privilege Assignment vulnerability in wpase.com Admin and Site Enhancements (ASE) allows Privilege Escalation. This issue affects Admin and Site Enhancements (ASE): from n/a through 7.6.2.1. New CWE-266
 Incorrect Privilege Assignment
CVE-2025-24648 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
175 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP24 WP24 Domain Check allows Reflected XSS. This issue affects WP24 Domain Check: from n/a throu… New CWE-79
Cross-site Scripting
CVE-2025-24602 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
176 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS. This issue affects Newsletters: from n/a through 4.9.… New CWE-79
Cross-site Scripting
CVE-2025-24599 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
177 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mailster allows Reflected XSS. This issue affects WP Mailster: from n/a through 1.8.… New CWE-79
Cross-site Scripting
CVE-2025-24598 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
178 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Optimize Worldwide Find Content IDs allows Reflected XSS. This issue affects Find Content IDs: fr… New CWE-79
Cross-site Scripting
CVE-2025-23645 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
179 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Landoweb Programador World Cup Predictor allows Reflected XSS. This issue affects World Cup Predi… New CWE-79
Cross-site Scripting
CVE-2025-22794 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm
180 - - - Missing Authorization vulnerability in Ksher Ksher allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ksher: from n/a through 1.1.2. New CWE-862
 Missing Authorization
CVE-2025-22730 2025-02-5 00:15 2025-02-5 Show GitHub Exploit DB Packet Storm