Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 21, 2025, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206331	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-3835	2011-06-29 10:25	2010-09-10	Show	GitHub Exploit DB Packet Storm

206332	4	警告	アップルターボリナックス MySQL AB	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3834	2011-06-29 10:24	2010-09-10	Show	GitHub Exploit DB Packet Storm

206333	5	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3833	2011-06-29 10:17	2010-09-10	Show	GitHub Exploit DB Packet Storm

206334	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3790	2011-06-29 10:15	2010-11-16	Show	GitHub Exploit DB Packet Storm

206335	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3682	2011-06-29 10:14	2010-07-9	Show	GitHub Exploit DB Packet Storm

206336	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3677	2011-06-29 10:13	2010-07-9	Show	GitHub Exploit DB Packet Storm

206337	7.5	危険	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクル VMware レッドハット	-	Samba の sid_parse および dom_sid_parse 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3069	2011-06-29 10:11	2010-09-14	Show	GitHub Exploit DB Packet Storm

206338	7.8	危険	アップルオラクル	-	Oracle Solaris の FTB サーバにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2632	2011-06-29 10:10	2011-01-18	Show	GitHub Exploit DB Packet Storm

206339	5	警告	アップル VMware OpenSSL Project IBM ヒューレット・パッカード	-	OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0740	2011-06-29 10:08	2010-03-24	Show	GitHub Exploit DB Packet Storm

206340	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2094	2011-06-28 12:25	2011-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 21, 2025, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1	-		-	-	CodeIgniter is a PHP full-stack web framework. Prior to 4.5.8, CodeIgniter lacked proper header validation for its name and value. The potential attacker can construct deliberately malformed headers … New	CWE-436 Interpretation Conflict	CVE-2025-24013	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

2	-		-	-	Vite is a frontend tooling framework for javascript. Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of validation… New	CWE-346 CWE-350 CWE-1385 Origin Validation Error Reliance on Reverse DNS Resolution for a Security-Critical Action Missing Origin Validation in WebSockets	CVE-2025-24010	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

3	-		-	-	WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adi… New	CWE-89 SQL Injection	CVE-2025-23220	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

4	-		-	-	WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adi… New	CWE-89 SQL Injection	CVE-2025-23219	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

5	-		-	-	WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adi… New	CWE-89 SQL Injection	CVE-2025-23218	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

6	-		-	-	PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the … New	CWE-352 Origin Validation Error	CVE-2025-23044	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

7	-		-	-	gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them ap… New	CWE-281 CWE-687 Improper Preservation of Permissions Function Call With Incorrectly Specified Argument Value	CVE-2025-22620	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

8	-		-	-	PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays … New	CWE-79 Cross-site Scripting	CVE-2025-22131	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

9	-		-	-	Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack,… New	CWE-476 CWE-305 CWE-841 NULL Pointer Dereference Authentication Bypass by Primary Weakness Improper Enforcement of Behavioral Workflow	CVE-2024-51738	2025-01-21 01:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

10	5.6	MEDIUM Network	-	-	IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without pri… New	CWE-620 Unverified Password Change	CVE-2024-45647	2025-01-21 00:15	2025-01-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed