Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208991 9.3 危険 アドビシステムズ - Adobe Shockwave Player に脆弱性 CWE-119
バッファエラー 		CVE-2010-3653 2010-11-16 14:49 2010-10-25 Show GitHub Exploit DB Packet Storm
208992 7.5 危険 富士通 - Interstage Application Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6258 2010-11-16 14:48 2008-02-19 Show GitHub Exploit DB Packet Storm
208993 6.5 警告 アップル
サイバートラスト株式会社
MySQL AB
ターボリナックス
レッドハット		 - MySQL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1848 2010-11-15 16:20 2010-05-5 Show GitHub Exploit DB Packet Storm
208994 5 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4500 2010-11-15 15:41 2009-07-21 Show GitHub Exploit DB Packet Storm
208995 9.3 危険 サイバートラスト株式会社
Zabbix		 - Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4502 2010-11-15 15:41 2009-09-10 Show GitHub Exploit DB Packet Storm
208996 5 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの zbx_get_next_field 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4501 2010-11-15 15:40 2009-11-25 Show GitHub Exploit DB Packet Storm
208997 7.5 危険 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4499 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
208998 6.8 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの node_process_command 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-4498 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
208999 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3181 2010-11-11 15:07 2010-10-19 Show GitHub Exploit DB Packet Storm
209000 9.3 危険 アドビシステムズ - 複数の Adobe 製品における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3153 2010-11-10 15:34 2010-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3291 - - - Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQ… - CVE-2024-54762 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3292 - - - BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. - CVE-2024-54761 2025-01-11 01:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3293 5.5 MEDIUM
Local 		qualcomm ar8035_firmware
c-v2x_9150_firmware
csrb31024_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
msm8996au_firmware
qam8295p_firmware
qca63… 		Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. CWE-125
Out-of-bounds Read 		CVE-2024-33067 2025-01-11 00:39 2025-01-6 Show GitHub Exploit DB Packet Storm
3294 5.5 MEDIUM
Local 		qualcomm qam8255p_firmware
qam8295p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qca6595_firmware
qca6595au_firmware
qca6696_firmware
qca6698aq_firmware
sa8255p_fi… 		information disclosure while invoking the mailbox read API. CWE-125
Out-of-bounds Read 		CVE-2024-43063 2025-01-11 00:37 2025-01-6 Show GitHub Exploit DB Packet Storm
3295 7.8 HIGH
Local 		google android In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional e… NVD-CWE-noinfo
CVE-2023-35685 2025-01-11 00:30 2025-01-9 Show GitHub Exploit DB Packet Storm
3296 - - - A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "page… - CVE-2024-57686 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3297 - - - In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal(). - CVE-2024-57822 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3298 - - - Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2. - CVE-2024-13288 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3299 9.8 CRITICAL
Network 		- - IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, a… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2024-41787 2025-01-10 23:15 2025-01-10 Show GitHub Exploit DB Packet Storm
3300 - - - In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path(). - CVE-2024-57823 2025-01-10 23:15 2025-01-10 Show GitHub Exploit DB Packet Storm