Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208691 10 危険 Google - Google Chrome 内にあるサンドボックスのインフラストラクチャーにおける脆弱性 CWE-399
リソース管理の問題
CVE-2010-1229 2010-11-24 15:03 2010-03-17 Show GitHub Exploit DB Packet Storm
208692 10 危険 Google - Google Chrome 内にあるサンドボックスのインフラストラクチャーにおける競合状態の脆弱性 CWE-362
競合状態
CVE-2010-1228 2010-11-24 15:02 2010-03-17 Show GitHub Exploit DB Packet Storm
208693 5 警告 Google - Google Chrome の ChildProcessSecurityPolicy::CanRequestURL 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0664 2010-11-24 15:02 2010-01-25 Show GitHub Exploit DB Packet Storm
208694 5 警告 Google - Google Chrome の ParamTraits::Read 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0663 2010-11-24 15:02 2010-01-25 Show GitHub Exploit DB Packet Storm
208695 5 警告 Google - Google Chrome の ParamTraits::Read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-0662 2010-11-24 15:01 2010-01-25 Show GitHub Exploit DB Packet Storm
208696 5 警告 Google - Google Chrome における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0660 2010-11-24 15:01 2010-01-25 Show GitHub Exploit DB Packet Storm
208697 5 警告 Google - Google Chrome における document.styleSheets[0].href のプロパティ値を読まれる脆弱性 CWE-Other
その他
CVE-2010-0315 2010-11-24 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
208698 9.3 危険 Google - Google Chrome にて使用される Skia における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0658 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
208699 9.3 危険 Google - Windows 上で稼働する Google Chrome における重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2010-0657 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
208700 9.3 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0655 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 29, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 - - - imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose servi… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-24354 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
202 - - - matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. When Hookshot 6 version 6.0.1 or below, or Hookshot 5 version 5.4.1 or below, is configured wi… New CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2025-23197 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
203 4.5 MEDIUM
Local
- - A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search … New CWE-426
 Untrusted Search Path
CVE-2025-0733 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
204 4.5 MEDIUM
Local
- - A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipul… New CWE-426
 Untrusted Search Path
CVE-2025-0732 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
205 - - - In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT_AT_INF… New - CVE-2024-26317 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
206 - - - fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peer… New CWE-405
 Asymmetric Resource Consumption (Amplification)
CVE-2025-24356 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
207 - - - Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploi… New - CVE-2024-12740 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
208 - - - A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php. Update - CVE-2025-22980 2025-01-28 03:15 2025-01-23 Show GitHub Exploit DB Packet Storm
209 - - - Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ss… New CWE-78
OS Command 
CVE-2025-22604 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
210 3.7 LOW
Network
- - A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP G… New CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2025-0730 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm