Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 3, 2025, 1:14 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 206071 | 4.3 | 警告 | PrestaShop | - | Prestashop におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4544 | 2011-12-5 16:00 | 2011-12-1 | Show | GitHub Exploit DB Packet Storm |
| 206072 | 4.3 | 警告 | atmail pty ltd | - | AtMail Open におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4540 | 2011-12-5 15:58 | 2011-12-1 | Show | GitHub Exploit DB Packet Storm |
| 206073 | 2.6 | 注意 | CloudBees | - | CloudBees Jenkins の Jenkins Core におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4344 | 2011-12-2 15:50 | 2011-11-8 | Show | GitHub Exploit DB Packet Storm |
| 206074 | 4.3 | 警告 | シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) | - | PowerChute Business Edition におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4263 | 2011-12-2 12:01 | 2011-12-2 | Show | GitHub Exploit DB Packet Storm |
| 206075 | 4.3 | 警告 | Geeklog | - | Geeklog におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4647 | 2011-12-1 16:48 | 2011-06-23 | Show | GitHub Exploit DB Packet Storm |
| 206076 | 6 | 警告 | Lester Chan | - | WordPress 用 WP-PostRatings プラグインにおける SQL インジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4646 | 2011-12-1 16:47 | 2011-11-30 | Show | GitHub Exploit DB Packet Storm |
| 206077 | 7.5 | 危険 | Hastymail | - | Hastymail2 における任意のコマンドを実行される脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4542 | 2011-12-1 16:46 | 2011-11-30 | Show | GitHub Exploit DB Packet Storm |
| 206078 | 7.5 | 危険 | Novell | - | Novell NetWare の xdrDecodeString 関数におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4191 | 2011-12-1 16:44 | 2011-10-5 | Show | GitHub Exploit DB Packet Storm |
| 206079 | 7.5 | 危険 | Namazu Project | - | Namazu におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-5028 | 2011-12-1 16:42 | 2011-11-30 | Show | GitHub Exploit DB Packet Storm |
| 206080 | 5 | 警告 | arora | - | Arora における証明書の Common Name (CN) を偽造される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-3367 | 2011-12-1 16:42 | 2011-11-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Feb. 3, 2025, 4:07 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1541 | 5.4 |
MEDIUM
Network |
- | - | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.1.0-2… | - | CVE-2025-21526 | 2025-01-22 06:15 | 2025-01-22 | Show | GitHub Exploit DB Packet Storm |
| 1542 | 7.2 |
HIGH
Network |
fortinet |
fortimanager fortianalyzer |
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12… |
CWE-22
Path Traversal |
CVE-2024-33502 | 2025-01-22 06:03 | 2025-01-14 | Show | GitHub Exploit DB Packet Storm |
| 1543 | - | - | - | Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's funct… |
CWE-671
Lack of Administrator Control over Security |
CVE-2025-24024 | 2025-01-22 05:15 | 2025-01-22 | Show | GitHub Exploit DB Packet Storm | |
| 1544 | - | - | - | Homarr before v0.14.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notebook widget. | - | CVE-2023-45908 | 2025-01-22 05:15 | 2025-01-22 | Show | GitHub Exploit DB Packet Storm | |
| 1545 | - | - | - | Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3 | - | CVE-2024-13454 | 2025-01-22 05:15 | 2025-01-21 | Show | GitHub Exploit DB Packet Storm | |
| 1546 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_10_1607 windows_10_1507 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21339 | 2025-01-22 05:11 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 1547 | 7.8 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 office windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 w… |
GDI+ Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21338 | 2025-01-22 05:08 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 1548 | 5.6 |
MEDIUM
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_11_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_… |
Windows Cryptographic Information Disclosure Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21336 | 2025-01-22 05:06 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 1549 | 7.5 |
HIGH
Network
microsoft
|
windows_server_2022_23h2 |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_23h2 windows_11_24h2 windows_server_2019 windows_server_2022 windows_ser…
Windows Remote Desktop Services Denial of Service Vulnerability
|
NVD-CWE-noinfo
|
CVE-2025-21330
|
2025-01-22 05:04 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 1550 | 7.3 |
HIGH
Local |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_10_1607 windows_10_1507 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_… |
Windows Installer Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21331 | 2025-01-22 04:58 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |