Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 18, 2025, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208251	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2201	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

208252	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2168	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

208253	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

208254	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

208255	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

208256	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

208257	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

208258	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

208259	6	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2813	2010-07-20 18:01	2009-09-10	Show	GitHub Exploit DB Packet Storm

208260	5	警告	S2 Security	-	S2 Netbox に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2466	2010-07-16 18:41	2010-06-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
421	-		-	-	Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, bein… New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2025-0471	2025-01-16 22:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

422	-		-	-	In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be deployed to support authentication using a … New	-	CVE-2025-23013	2025-01-16 22:15	2025-01-15	Show	GitHub Exploit DB Packet Storm

423	7.5	HIGH Network	-	-	An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption. New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2018-25108	2025-01-16 20:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

424	-		-	-	A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 th… New	CWE-1390 Weak Authentication	CVE-2024-50563	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

425	6.4	MEDIUM Network	-	-	The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input san… New	CWE-79 Cross-site Scripting	CVE-2024-13387	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

426	5.4	MEDIUM Network	-	-	The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() functi… New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-13355	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

427	6.5	MEDIUM Network	-	-	The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping … New	CWE-89 SQL Injection	CVE-2024-12615	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

428	7.5	HIGH Network	-	-	The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versi… New	CWE-89 SQL Injection	CVE-2024-12614	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

429	7.5	HIGH Network	-	-	The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping… New	CWE-89 SQL Injection	CVE-2024-12613	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

430	5.3	MEDIUM Network	-	-	The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.… New	CWE-862 Missing Authorization	CVE-2024-12427	2025-01-16 19:15	2025-01-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed