Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207431 7.2 危険 マイクロソフト - Microsoft Windows の Ancillary Function Driver における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1249 2011-06-27 16:16 2011-06-14 Show GitHub Exploit DB Packet Storm
207432 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1279 2011-06-27 16:16 2011-06-14 Show GitHub Exploit DB Packet Storm
207433 9.3 危険 マイクロソフト - Microsoft Excel 2002 および Office 2004 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1278 2011-06-27 16:15 2011-06-14 Show GitHub Exploit DB Packet Storm
207434 4 警告 サイボウズ - サイボウズ Office におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1335 2011-06-24 12:02 2011-06-24 Show GitHub Exploit DB Packet Storm
207435 4.3 警告 サイボウズ - 複数のサイボウズ製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1334 2011-06-24 12:02 2011-06-24 Show GitHub Exploit DB Packet Storm
207436 3.5 注意 サイボウズ - 複数のサイボウズ製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1333 2011-06-24 12:02 2011-06-24 Show GitHub Exploit DB Packet Storm
207437 2.6 注意 サイボウズ - サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1332 2011-06-24 12:01 2011-06-24 Show GitHub Exploit DB Packet Storm
207438 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1277 2011-06-24 10:12 2011-06-14 Show GitHub Exploit DB Packet Storm
207439 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1276 2011-06-24 10:11 2011-06-14 Show GitHub Exploit DB Packet Storm
207440 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1275 2011-06-24 10:10 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3281 - - - An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. - CVE-2024-46210 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3282 - - - An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" G… - CVE-2024-57687 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3283 - - - Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function. - CVE-2024-51229 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3284 - - - Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQ… - CVE-2024-54762 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3285 - - - BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. - CVE-2024-54761 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3286 5.5 MEDIUM
Local 		qualcomm ar8035_firmware
c-v2x_9150_firmware
csrb31024_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
msm8996au_firmware
qam8295p_firmware
qca63… 		Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. CWE-125
Out-of-bounds Read 		CVE-2024-33067 2025-01-11 00:39 2025-01-6 Show GitHub Exploit DB Packet Storm
3287 5.5 MEDIUM
Local 		qualcomm qam8255p_firmware
qam8295p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qca6595_firmware
qca6595au_firmware
qca6696_firmware
qca6698aq_firmware
sa8255p_fi… 		information disclosure while invoking the mailbox read API. CWE-125
Out-of-bounds Read 		CVE-2024-43063 2025-01-11 00:37 2025-01-6 Show GitHub Exploit DB Packet Storm
3288 7.8 HIGH
Local 		google android In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional e… NVD-CWE-noinfo
CVE-2023-35685 2025-01-11 00:30 2025-01-9 Show GitHub Exploit DB Packet Storm
3289 - - - A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "page… - CVE-2024-57686 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3290 - - - In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal(). - CVE-2024-57822 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm