Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206851 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Embedded OpenType Font Engine における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1883 2010-10-25 16:37 2010-10-12 Show GitHub Exploit DB Packet Storm
206852 7.6 危険 マイクロソフト - 複数の Microsoft 製品の Media Player Network Sharing Service における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3225 2010-10-25 16:36 2010-10-12 Show GitHub Exploit DB Packet Storm
206853 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3331 2010-10-25 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
206854 4.3 警告 マイクロソフト - Microsoft Internet Explorer における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3330 2010-10-25 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
206855 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3329 2010-10-25 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
206856 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3328 2010-10-25 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
206857 4.3 警告 マイクロソフト - Microsoft Internet Explorer の HTML コンテンツ作成の実装における削除済みの重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3327 2010-10-25 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
206858 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3326 2010-10-25 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
206859 4.3 警告 マイクロソフト - Microsoft Internet Explorer における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3325 2010-10-25 16:31 2010-10-12 Show GitHub Exploit DB Packet Storm
206860 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1263 2010-10-25 16:29 2010-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 - - - WeGIA is a web manager for charitable institutions. A Cross-Site Scripting (XSS) vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controla_xlsx… CWE-79
CWE-434
Cross-site Scripting
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22132 2025-01-8 07:15 2025-01-8 Show GitHub Exploit DB Packet Storm
682 - - - An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCT… - CVE-2024-55410 2025-01-8 07:15 2025-01-8 Show GitHub Exploit DB Packet Storm
683 - - - An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication. - CVE-2024-54764 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
684 - - - An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication. - CVE-2024-54763 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
685 - - - The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (with no permissions) to place phone calls without user interac… - CVE-2024-53935 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
686 - - - An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.… - CVE-2024-48455 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
687 - - - An issue in the AsusSAIO.sys component of ASUS System Analysis IO v1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. - CVE-2024-55408 2025-01-8 07:15 2025-01-7 Show GitHub Exploit DB Packet Storm
688 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. This is not a valid vulnerability. Notes: All references and descriptions in this candidate… - CVE-2024-10541 2025-01-8 06:15 2025-01-8 Show GitHub Exploit DB Packet Storm
689 - - - SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk. - CVE-2024-54880 2025-01-8 06:15 2025-01-7 Show GitHub Exploit DB Packet Storm
690 - - - SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely. - CVE-2024-54879 2025-01-8 06:15 2025-01-7 Show GitHub Exploit DB Packet Storm