Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207431 4.3 警告 xmlsoft.org
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
OpenOffice.org Project
レッドハット
- libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-2414 2010-07-13 16:26 2009-08-11 Show GitHub Exploit DB Packet Storm
207432 4.3 警告 アップル - Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性 CWE-Other
その他
CVE-2009-1723 2010-07-13 16:25 2009-08-5 Show GitHub Exploit DB Packet Storm
207433 3.5 注意 アップル - Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1382 2010-07-12 18:12 2010-06-15 Show GitHub Exploit DB Packet Storm
207434 3.5 注意 アップル - Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性 CWE-16
環境設定
CVE-2010-1381 2010-07-12 18:12 2010-06-15 Show GitHub Exploit DB Packet Storm
207435 7.5 危険 アップル - Apple Mac OS X の cgtexttops CUPS フィルタにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-1380 2010-07-12 18:11 2010-06-15 Show GitHub Exploit DB Packet Storm
207436 5 警告 アップル - Apple Mac OS X のプリンタ設定におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1379 2010-07-12 18:11 2010-06-15 Show GitHub Exploit DB Packet Storm
207437 5 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-noinfo
CVE-2010-0775 2010-07-12 16:43 2010-05-8 Show GitHub Exploit DB Packet Storm
207438 4.3 警告 IBM - IBM WebSphere Application Server におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0774 2010-07-12 16:43 2010-05-8 Show GitHub Exploit DB Packet Storm
207439 5 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS
- CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3553 2010-07-12 16:41 2009-11-20 Show GitHub Exploit DB Packet Storm
207440 9.3 危険 アップル - Apple Mac OS X の Open Directory における任意のコードを実行される脆弱性 CWE-310
暗号の問題
CVE-2010-1377 2010-07-9 16:27 2010-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2351 7.8 HIGH
Local
adobe illustrator Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … CWE-787
 Out-of-bounds Write
CVE-2024-49538 2024-12-19 00:17 2024-12-11 Show GitHub Exploit DB Packet Storm
2352 - - - A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2024-50570 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2353 - - - An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, v… CWE-78
OS Command 
CVE-2024-48889 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2354 - - - A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests. CWE-23
CWE-94
 Relative Path Traversal
Code Injection
CVE-2023-34990 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2355 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saoshyant Saoshyant Element allows Reflected XSS.This issue affects Saoshyant Element: from n/a t… CWE-79
Cross-site Scripting
CVE-2024-51646 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2356 - - - Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is … - CVE-2024-4996 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2357 - - - In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in … - CVE-2024-56175 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2358 - - - Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. - CVE-2024-21548 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2359 - - - The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attack… - CVE-2024-10892 2024-12-19 00:15 2024-12-18 Show GitHub Exploit DB Packet Storm
2360 7.8 HIGH
Local
adobe photoshop Photoshop Desktop versions 26.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… CWE-416
 Use After Free
CVE-2024-52997 2024-12-19 00:14 2024-12-11 Show GitHub Exploit DB Packet Storm