Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205951 5 警告 Mozilla Foundation - 複数の Mozilla 製品の JavaScript 実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2002-2437 2011-12-12 16:12 2011-12-7 Show GitHub Exploit DB Packet Storm
205952 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の CSS 実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2002-2436 2011-12-12 16:12 2011-12-7 Show GitHub Exploit DB Packet Storm
205953 4.3 警告 マイクロソフト - Microsoft Internet Explorer の CSS 実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2002-2435 2011-12-12 16:11 2011-12-7 Show GitHub Exploit DB Packet Storm
205954 6.8 警告 レッドハット - FreeIPA におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3636 2011-12-12 11:42 2011-12-8 Show GitHub Exploit DB Packet Storm
205955 4.3 警告 Vtiger - vtiger CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4680 2011-12-12 11:39 2011-12-7 Show GitHub Exploit DB Packet Storm
205956 4 警告 Vtiger - vtiger CRM におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4679 2011-12-12 11:39 2011-12-7 Show GitHub Exploit DB Packet Storm
205957 5 警告 Novell - Novell Messenger および Novell GroupWise Messenger における任意のメモリ配置を読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2011-3179 2011-12-12 11:37 2011-10-25 Show GitHub Exploit DB Packet Storm
205958 10 危険 Novell - Novell ZENworks Asset Management の rtrlet コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2653 2011-12-12 11:36 2011-11-2 Show GitHub Exploit DB Packet Storm
205959 7.8 危険 日立 - JP1/Cm2/Network Node Manager i におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2011-12-9 16:35 2011-10-12 Show GitHub Exploit DB Packet Storm
205960 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (CPU およびメモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4687 2011-12-9 16:07 2011-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1661 - - - An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing … - CVE-2025-23369 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1662 - - - An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via th… - CVE-2024-55504 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1663 - - - SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function. - CVE-2024-54795 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1664 - - - The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. - CVE-2024-54794 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1665 - - - A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside… - CVE-2024-54792 2025-01-22 04:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1666 - - - In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint CWE-862
 Missing Authorization 		CVE-2025-24461 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1667 - - - In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool CWE-863
 Incorrect Authorization 		CVE-2025-24460 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1668 - - - In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page CWE-79
Cross-site Scripting 		CVE-2025-24459 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1669 - - - In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration CWE-290
 Authentication Bypass by Spoofing 		CVE-2025-24458 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
1670 - - - In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2025-24457 2025-01-22 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm