Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206761 9.3 危険 マイクロソフト - Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1982 2011-10-20 16:19 2011-09-13 Show GitHub Exploit DB Packet Storm
206762 7.2 危険 マイクロソフト - Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1984 2011-10-20 16:19 2011-09-13 Show GitHub Exploit DB Packet Storm
206763 9.3 危険 マイクロソフト - Microsoft Excel 2003 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1986 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
206764 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1987 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
206765 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1988 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
206766 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1989 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
206767 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1990 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
206768 9.3 危険 マイクロソフト - Microsoft Windows における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1991 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
206769 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2442 2011-10-20 16:14 2011-09-13 Show GitHub Exploit DB Packet Storm
206770 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の CoolType.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2441 2011-10-20 16:14 2011-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3271 7.8 HIGH
Local 		qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qam8295p_firmware
qca6574au_firmware
qca6696_firmware
qcm8550_firmware
qcs6490_firmware
qcs8550_firmware
video_collaboratio… 		Memory corruption while invoking IOCTL calls to unmap the DMA buffers. CWE-416
 Use After Free 		CVE-2024-33055 2025-01-11 02:01 2025-01-6 Show GitHub Exploit DB Packet Storm
3272 7.8 HIGH
Local 		qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qcm8550_firmware
qcs8550_firmware
sg8275p_firmware
sm8550p_firmware
snapdragon_8_gen_2_mobile_firmware
snapdragon_8_gen_3_mobi… 		Memory corruption while processing frame command IOCTL calls. CWE-416
 Use After Free 		CVE-2024-33059 2025-01-11 01:53 2025-01-6 Show GitHub Exploit DB Packet Storm
3273 5.5 MEDIUM
Local 		qualcomm qcs8550_firmware
sw5100_firmware
sw5100p_firmware
wcn3660b_firmware
wcn3680b_firmware
wcn3980_firmware
wcn3988_firmware
wsa8830_firmware
wsa8835_firmware 		Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. CWE-125
Out-of-bounds Read 		CVE-2024-33061 2025-01-11 01:49 2025-01-6 Show GitHub Exploit DB Packet Storm
3274 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_doacao.php endpoint of the WeGIA application. This vulnerab… CWE-79
Cross-site Scripting 		CVE-2025-22600 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3275 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows at… CWE-79
Cross-site Scripting 		CVE-2025-22599 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3276 - - - WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the cadastrarSocio.php endpoint of the WeGIA application. This vulnerability al… CWE-79
Cross-site Scripting 		CVE-2025-22598 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3277 - - - WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerabilit… CWE-79
Cross-site Scripting 		CVE-2025-22597 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3278 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the modulos_visiveis.php endpoint of the WeGIA application. This vulnerabili… CWE-79
Cross-site Scripting 		CVE-2025-22596 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3279 - - - Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execut… CWE-22
CWE-94
CWE-434
Path Traversal
Code Injection
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22152 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3280 - - - DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause t… CWE-289
 Authentication Bypass by Alternate Name 		CVE-2024-56511 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm