Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208921 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
208922 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
208923 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
208924 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4248 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
208925 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4246 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
208926 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer の smlrender.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4257 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
208927 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4245 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
208928 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4244 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
208929 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-0376 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
208930 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0375 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function. New - CVE-2024-40513 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
72 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly published by the other party. New - CVE-2023-22139 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
73 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly published by the other party. New - CVE-2019-3309 2025-01-17 08:15 2025-01-17 Show GitHub Exploit DB Packet Storm
74 - - - A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows an attacker to elevate their privileges via executing a specially crafted executable. New - CVE-2024-55511 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
75 - - - A JNDI injection issue was discovered in Cloudera JDBC Connector for Hive before 2.6.26 and JDBC Connector for Impala before 2.6.35. Attackers can inject malicious parameters into the JDBC URL, trigg… New - CVE-2024-54660 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
76 - - - An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails. New - CVE-2024-48460 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
77 - - - Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request. New - CVE-2024-46450 2025-01-17 07:15 2025-01-17 Show GitHub Exploit DB Packet Storm
78 8.5 HIGH
Network 		boldgrid w3_total_cache The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. … Update CWE-862
 Missing Authorization 		CVE-2024-12365 2025-01-17 06:31 2025-01-14 Show GitHub Exploit DB Packet Storm
79 7.5 HIGH
Network 		boldgrid w3_total_cache The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unaut… Update NVD-CWE-noinfo
CVE-2024-12008 2025-01-17 06:30 2025-01-14 Show GitHub Exploit DB Packet Storm
80 5.3 MEDIUM
Network 		boldgrid w3_total_cache The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This mak… Update CWE-862
 Missing Authorization 		CVE-2024-12006 2025-01-17 06:30 2025-01-14 Show GitHub Exploit DB Packet Storm