Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208701 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3794 2010-12-17 14:29 2010-11-16 Show GitHub Exploit DB Packet Storm
208702 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3793 2010-12-17 14:28 2010-11-16 Show GitHub Exploit DB Packet Storm
208703 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3792 2010-12-17 14:27 2010-11-16 Show GitHub Exploit DB Packet Storm
208704 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3791 2010-12-17 13:59 2010-11-16 Show GitHub Exploit DB Packet Storm
208705 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3789 2010-12-17 13:48 2010-11-16 Show GitHub Exploit DB Packet Storm
208706 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3788 2010-12-17 13:46 2010-11-16 Show GitHub Exploit DB Packet Storm
208707 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3787 2010-12-17 13:45 2010-11-16 Show GitHub Exploit DB Packet Storm
208708 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3826 2010-12-17 12:47 2010-11-22 Show GitHub Exploit DB Packet Storm
208709 9.3 危険 アップル
Google		 - Apple Safari および Google Chrome の WebKit における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2010-1822 2010-12-17 12:44 2010-10-4 Show GitHub Exploit DB Packet Storm
208710 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3824 2010-12-17 12:40 2010-11-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3961 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the modulos_visiveis.php endpoint of the WeGIA application. This vulnerabili… CWE-79
Cross-site Scripting 		CVE-2025-22596 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3962 - - - Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execut… CWE-22
CWE-94
CWE-434
Path Traversal
Code Injection
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22152 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3963 - - - DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause t… CWE-289
 Authentication Bypass by Alternate Name 		CVE-2024-56511 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3964 - - - An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. - CVE-2024-46210 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
3965 - - - An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" G… - CVE-2024-57687 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3966 - - - Cross Site Scripting vulnerability in LinZhaoguan pb-cms v.2.0 allows a remote attacker to execute arbitrary code via the theme management function. - CVE-2024-51229 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3967 - - - Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQ… - CVE-2024-54762 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3968 - - - BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. - CVE-2024-54761 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3969 5.5 MEDIUM
Local 		qualcomm ar8035_firmware
c-v2x_9150_firmware
csrb31024_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
msm8996au_firmware
qam8295p_firmware
qca63… 		Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. CWE-125
Out-of-bounds Read 		CVE-2024-33067 2025-01-11 00:39 2025-01-6 Show GitHub Exploit DB Packet Storm
3970 5.5 MEDIUM
Local 		qualcomm qam8255p_firmware
qam8295p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qca6595_firmware
qca6595au_firmware
qca6696_firmware
qca6698aq_firmware
sa8255p_fi… 		information disclosure while invoking the mailbox read API. CWE-125
Out-of-bounds Read 		CVE-2024-43063 2025-01-11 00:37 2025-01-6 Show GitHub Exploit DB Packet Storm