Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208571 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足
CVE-2008-3692 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
208572 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足
CVE-2008-3691 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
208573 10 危険 VMware - 複数の VMware 製品のデフォルト設定における脆弱性 CWE-16
環境設定
CVE-2008-1392 2010-09-13 15:57 2008-03-20 Show GitHub Exploit DB Packet Storm
208574 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3892 2010-09-13 15:57 2008-09-3 Show GitHub Exploit DB Packet Storm
208575 7.2 危険 VMware - 複数の VMware 製品の VIX API におけるバッファオーバーフローの脆弱性 CWE-119
CWE-noinfo
CVE-2008-2100 2010-09-13 15:56 2008-06-4 Show GitHub Exploit DB Packet Storm
208576 7.8 危険 VMware - 複数の VMware 製品の DHCP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-noinfo
CVE-2008-1364 2010-09-13 15:56 2008-03-17 Show GitHub Exploit DB Packet Storm
208577 6.8 警告 VMware - 複数の VMware 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-1363 2010-09-13 15:56 2008-03-17 Show GitHub Exploit DB Packet Storm
208578 7.2 危険 VMware - 複数の VMware 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-1362 2010-09-13 15:55 2008-03-17 Show GitHub Exploit DB Packet Storm
208579 6.8 警告 VMware - 複数の VMware 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-1361 2010-09-13 15:55 2008-03-17 Show GitHub Exploit DB Packet Storm
208580 7.1 危険 VMware - 複数の VMware 製品の Virtual Machine Communication Interface (VMCI) におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-1340 2010-09-13 15:55 2008-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 9.8 CRITICAL
Network
tenda ac18_firmware Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function. Update CWE-77
Command Injection
CVE-2024-57583 2025-01-23 01:53 2025-01-17 Show GitHub Exploit DB Packet Storm
2 9.8 CRITICAL
Network
tenda ac18_firmware Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. Update CWE-787
 Out-of-bounds Write
CVE-2024-57575 2025-01-23 01:53 2025-01-17 Show GitHub Exploit DB Packet Storm
3 9.9 CRITICAL
Network
simple-help simplehelp SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate p… Update NVD-CWE-noinfo
CVE-2024-57726 2025-01-23 01:25 2025-01-16 Show GitHub Exploit DB Packet Storm
4 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leetoo Toocheke Companion allows Stored XSS. This issue affects Toocheke Companion: from n/a thro… New CWE-79
Cross-site Scripting
CVE-2025-23992 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
5 - - - Deserialization of Untrusted Data vulnerability in NotFound Muzaara Google Ads Report allows Object Injection. This issue affects Muzaara Google Ads Report: from n/a through 3.1. New CWE-502
 Deserialization of Untrusted Data
CVE-2025-23914 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
6 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Blue Wrench Video Widget allows Reflected XSS. This issue affects Blue Wrench Video Widg… New CWE-79
Cross-site Scripting
CVE-2025-23809 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
7 - - - The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of… New - CVE-2025-0638 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
8 - - - A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. New - CVE-2024-55488 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
9 - - - In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges can patch a binary in m… New - CVE-2024-42013 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm
10 - - - GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows ad… New - CVE-2024-42012 2025-01-23 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm