Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 20, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207621 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1806 2010-12-10 14:22 2010-09-7 Show GitHub Exploit DB Packet Storm
207622 9.3 危険 アップル - Apple Safari の WebKit におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1789 2010-12-10 14:22 2010-07-30 Show GitHub Exploit DB Packet Storm
207623 1.2 注意 アップル - Apple Safari の「Safari をリセット」における保存されているウェブサイトパスワードを読まれる脆弱性 CWE-362
競合状態 		CVE-2009-1707 2010-12-10 14:21 2009-06-8 Show GitHub Exploit DB Packet Storm
207624 4 警告 アップル - Apple Mac OS X の Dovecot における電子メールを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-4011 2010-12-9 14:50 2010-11-17 Show GitHub Exploit DB Packet Storm
207625 7.8 危険 富士通 - Interstage Application Server における情報漏えいの脆弱性 CWE-200
情報漏えい 		- 2010-12-9 14:43 2010-11-15 Show GitHub Exploit DB Packet Storm
207626 6.8 警告 アップル - Apple Mac OS X の Apple Type Services における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4010 2010-12-9 14:37 2010-11-16 Show GitHub Exploit DB Packet Storm
207627 5 警告 IBM - IBM WebSphere Application Server の Web Services Security コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0786 2010-12-9 14:34 2010-11-9 Show GitHub Exploit DB Packet Storm
207628 4.3 警告 IBM - IBM WebSphere Application Server の Integrated Solution コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4220 2010-12-9 14:30 2010-11-9 Show GitHub Exploit DB Packet Storm
207629 9.3 危険 アップル - iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1813 2010-12-8 15:52 2010-09-8 Show GitHub Exploit DB Packet Storm
207630 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0784 2010-12-8 15:31 2010-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2971 - - - Khoj is a self-hostable artificial intelligence app. Prior to version 1.29.10, an Insecure Direct Object Reference (IDOR) vulnerability in the update_subscription endpoint allows any authenticated us… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-52294 2024-12-31 02:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2972 - - - Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Del… CWE-843
Type Confusion 		CVE-2024-12834 2024-12-31 02:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2973 - - - Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required … CWE-78
OS Command  		CVE-2024-12828 2024-12-31 02:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2974 - - - AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first o… CWE-59
Link Following 		CVE-2024-12754 2024-12-31 02:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2975 - - - TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. - CVE-2024-50703 2024-12-31 01:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2976 - - - TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. - CVE-2024-50702 2024-12-31 01:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2977 - - - TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. - CVE-2024-50701 2024-12-31 01:15 2024-12-31 Show GitHub Exploit DB Packet Storm
2978 - - - An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes. - CVE-2024-56522 2024-12-31 01:15 2024-12-27 Show GitHub Exploit DB Packet Storm
2979 - - - A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/… - CVE-2024-12986 2024-12-31 00:15 2024-12-28 Show GitHub Exploit DB Packet Storm
2980 - - - A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fn… - CVE-2024-12967 2024-12-31 00:15 2024-12-27 Show GitHub Exploit DB Packet Storm