Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206941 5 警告 ISC, Inc. - BIND の ACL の処理に問題 CWE-264
認可・権限・アクセス制御 		CVE-2010-0218 2010-10-15 13:24 2010-10-1 Show GitHub Exploit DB Packet Storm
206942 5.1 警告 K2 Software - K2Editor における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3156 2010-10-15 11:22 2010-10-15 Show GitHub Exploit DB Packet Storm
206943 6.8 警告 kMonos.NET - XacRett における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3157 2010-10-15 11:22 2010-10-15 Show GitHub Exploit DB Packet Storm
206944 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2101 2010-10-14 16:20 2010-05-26 Show GitHub Exploit DB Packet Storm
206945 9.3 危険 レッドハット - Winamp および libmikmod の IN_MOD.DLL におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3996 2010-10-14 16:19 2009-12-18 Show GitHub Exploit DB Packet Storm
206946 9.3 危険 レッドハット - Winamp および libmikmod の IN_MOD.DLL におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3995 2010-10-14 16:19 2009-12-18 Show GitHub Exploit DB Packet Storm
206947 4.3 警告 レッドハット - libmikmod におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-6720 2010-10-14 16:19 2009-01-20 Show GitHub Exploit DB Packet Storm
206948 7.8 危険 シスコシステムズ - Cisco IOS の SSL VPN 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2836 2010-10-13 17:00 2010-09-22 Show GitHub Exploit DB Packet Storm
206949 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2051 2010-10-13 16:59 2010-09-22 Show GitHub Exploit DB Packet Storm
206950 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2835 2010-10-13 16:59 2010-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2491 - - - Incorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious loca… CWE-276
Incorrect Default Permissions  		CVE-2024-4229 2024-12-19 17:17 2024-12-19 Show GitHub Exploit DB Packet Storm
2492 - - - An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the co… CWE-824
 Access of Uninitialized Pointer 		CVE-2021-26093 2024-12-19 17:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2493 - - - A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid… CWE-122
Heap-based Buffer Overflow 		CVE-2020-12819 2024-12-19 17:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2494 4.3 MEDIUM
Network 		- - The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_bloc… CWE-200
Information Exposure 		CVE-2024-12560 2024-12-19 16:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2495 5.3 MEDIUM
Network 		- - The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up… CWE-285
Improper Authorization 		CVE-2024-11768 2024-12-19 15:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2496 7.3 HIGH
Network 		- - The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an act… CWE-94
Code Injection 		CVE-2024-11740 2024-12-19 15:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2497 - - - CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further… - CVE-2024-38499 2024-12-19 15:15 2024-12-17 Show GitHub Exploit DB Packet Storm
2498 - - - Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit thi… CWE-88
Argument Injection 		CVE-2024-51532 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2499 7.8 HIGH
Local 		- - IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. CWE-250
 Execution with Unnecessary Privileges 		CVE-2024-35141 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm
2500 5.4 MEDIUM
Network 		- - The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-12121 2024-12-19 11:15 2024-12-19 Show GitHub Exploit DB Packet Storm