Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209001 10 危険 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の LoginModule 実装における認証要求を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-4548 2010-07-22 20:51 2007-08-13 Show GitHub Exploit DB Packet Storm
209002 5 警告 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の management EJB における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5085 2010-07-22 20:51 2007-09-6 Show GitHub Exploit DB Packet Storm
209003 7.5 危険 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の SQLLoginModule における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5797 2010-07-22 20:51 2007-10-22 Show GitHub Exploit DB Packet Storm
209004 6.8 警告 InterSect Alliance International Pty - Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2594 2010-07-22 20:51 2010-06-30 Show GitHub Exploit DB Packet Storm
209005 5.5 警告 富士通 - Internet Navigware Server における情報漏えいの脆弱性 CWE-200
情報漏えい
- 2010-07-22 20:51 2010-06-18 Show GitHub Exploit DB Packet Storm
209006 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3726 2010-07-22 17:53 2009-11-9 Show GitHub Exploit DB Packet Storm
209007 5 警告 IBM
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
マイクロソフト
オラクル
OpenOffice.org Project
レッドハット
- XML 署名の検証において認証回避が可能な問題 CWE-DesignError
CVE-2009-0217 2010-07-22 17:52 2009-07-15 Show GitHub Exploit DB Packet Storm
209008 9.3 危険 アドビシステムズ
レッドハット
- Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2212 2010-07-21 16:31 2010-06-29 Show GitHub Exploit DB Packet Storm
209009 9.3 危険 アドビシステムズ
レッドハット
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2211 2010-07-21 16:31 2010-06-29 Show GitHub Exploit DB Packet Storm
209010 9.3 危険 アドビシステムズ
レッドハット
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2210 2010-07-21 16:31 2010-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3151 - - - In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and page… - CVE-2024-56710 2025-01-2 23:15 2024-12-29 Show GitHub Exploit DB Packet Storm
3152 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hait Post Grid Elementor Addon allows Stored XSS.This issue affects Post Grid Elementor Addon:… CWE-79
Cross-site Scripting
CVE-2024-56268 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3153 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolPlugins Coins MarketCap allows DOM-Based XSS.This issue affects Coins MarketCap: from n/a thr… CWE-79
Cross-site Scripting
CVE-2024-56257 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3154 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markyis Cool Olivia allows Reflected XSS.This issue affects Olivia: from n/a through 0.9.5. CWE-79
Cross-site Scripting
CVE-2024-56014 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3155 - - - Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4. CWE-352
 Origin Validation Error
CVE-2024-39623 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3156 - - - Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search.This issue affects WP Fast Total Search: from n/a through 1.69.234. CWE-352
 Origin Validation Error
CVE-2024-38778 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3157 - - - Cross-Site Request Forgery (CSRF) vulnerability in Marsian allows Cross Site Request Forgery.This issue affects i-transform: from n/a through 3.0.9. CWE-352
 Origin Validation Error
CVE-2024-38764 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3158 - - - A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been rated as critical. This issue affects some unknown processing of the file /doc.ht… CWE-285
CWE-266
Improper Authorization
 Incorrect Privilege Assignment
CVE-2024-13109 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3159 - - - A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulati… CWE-284
CWE-266
Improper Access Control
 Incorrect Privilege Assignment
CVE-2024-13108 2025-01-2 22:15 2025-01-2 Show GitHub Exploit DB Packet Storm
3160 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ConvertCalculator ConvertCalculator for WordPress allows Stored XSS.This issue affects ConvertCal… CWE-79
Cross-site Scripting
CVE-2024-56302 2025-01-2 21:15 2025-01-2 Show GitHub Exploit DB Packet Storm