Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206491 7.8 危険 シスコシステムズ - Cisco IOS の NAT 実装におけるサービス運用妨害 (デバイスのリロード) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3277 2011-11-7 16:37 2011-09-28 Show GitHub Exploit DB Packet Storm
206492 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE の NAT 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3276 2011-11-7 16:36 2011-09-28 Show GitHub Exploit DB Packet Storm
206493 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3275 2011-11-7 16:36 2011-09-28 Show GitHub Exploit DB Packet Storm
206494 6.1 警告 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3274 2011-11-7 16:35 2011-09-28 Show GitHub Exploit DB Packet Storm
206495 7.8 危険 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3273 2011-11-7 16:35 2011-09-28 Show GitHub Exploit DB Packet Storm
206496 7.8 危険 シスコシステムズ - Cisco IOS の IP SLA 機能におけるサービス運用妨害 (メモリ破損およびデバイスのリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3272 2011-11-7 16:33 2011-09-28 Show GitHub Exploit DB Packet Storm
206497 10 危険 シスコシステムズ - Cisco IOS の Smart Install 機能における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3271 2011-11-7 16:33 2011-09-28 Show GitHub Exploit DB Packet Storm
206498 7.8 危険 シスコシステムズ - Cisco 10000 シリーズのルータで動作する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3270 2011-11-7 16:31 2011-09-28 Show GitHub Exploit DB Packet Storm
206499 1.7 注意 IBM - IBM WebSphere MQ における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0905 2011-11-7 15:17 2011-10-30 Show GitHub Exploit DB Packet Storm
206500 4.1 警告 IBM - IBM WebSphere MQ におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0900 2011-11-7 15:17 2011-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3531 - - - WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_tipo_quadro… CWE-79
Cross-site Scripting 		CVE-2025-23035 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3532 - - - WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the `tags.php` endpoint… CWE-79
Cross-site Scripting 		CVE-2025-23034 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3533 - - - Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access controls. This can have … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2025-0066 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3534 - - - SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over… CWE-89
SQL Injection 		CVE-2025-0063 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3535 - - - SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vuln… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2025-0061 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3536 - - - SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to … CWE-94
Code Injection 		CVE-2025-0060 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3537 - - - Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP store user input in the local browser storage to improve usability. An attacker with administrative privileges or acces… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2025-0059 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3538 - - - In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwis… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-0058 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3539 - - - WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_situacao.ph… CWE-79
Cross-site Scripting 		CVE-2025-23033 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm
3540 - - - WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_escala.php`… CWE-79
Cross-site Scripting 		CVE-2025-23032 2025-01-14 10:15 2025-01-14 Show GitHub Exploit DB Packet Storm