Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209981	5	警告	Squid-cache.org サイバートラスト株式会社ターボリナックスレッドハット	-	Squid の strListGetItem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2855	2010-04-27 15:19	2009-08-18	Show	GitHub Exploit DB Packet Storm

209982	4.3	警告	アップルサイバートラスト株式会社 LibTIFF サン・マイクロシステムズレッドハット	-	libtiff の LZWDecodeCompat 関数におけるバッファアンダーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2285	2010-04-27 15:19	2009-07-1	Show	GitHub Exploit DB Packet Storm

209983	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

209984	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

209985	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

209986	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

209987	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

209988	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

209989	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

209990	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1101	7.5	HIGH Network	-	-	A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (…	CWE-789 CWE-476 Memory Allocation with Excessive Size Value NULL Pointer Dereference	CVE-2025-20165	2025-01-23 02:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

1102	5.3	MEDIUM Network	-	-	A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected d…	CWE-122 CWE-120 Heap-based Buffer Overflow Classic Buffer Overflow	CVE-2025-20128	2025-01-23 02:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

1103	4.3	MEDIUM Network	07fly	07flycms	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html	CWE-352 Origin Validation Error	CVE-2024-57161	2025-01-23 02:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

1104	4.3	MEDIUM Network	07fly	07flycms	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.	CWE-352 Origin Validation Error	CVE-2024-57160	2025-01-23 02:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

1105	8.8	HIGH Network	jfinaloa_project	jfinaloa	JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.	CWE-89 SQL Injection	CVE-2024-57775	2025-01-23 02:07	2025-01-17	Show	GitHub Exploit DB Packet Storm

1106	9.8	CRITICAL Network	tenda	ac18_firmware	Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function.	CWE-77 Command Injection	CVE-2024-57583	2025-01-23 01:53	2025-01-17	Show	GitHub Exploit DB Packet Storm

1107	9.8	CRITICAL Network	tenda	ac18_firmware	Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.	CWE-787 Out-of-bounds Write	CVE-2024-57575	2025-01-23 01:53	2025-01-17	Show	GitHub Exploit DB Packet Storm

1108	9.9	CRITICAL Network	simple-help	simplehelp	SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate p…	NVD-CWE-noinfo	CVE-2024-57726	2025-01-23 01:25	2025-01-16	Show	GitHub Exploit DB Packet Storm

1109	-		-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leetoo Toocheke Companion allows Stored XSS. This issue affects Toocheke Companion: from n/a thro…	CWE-79 Cross-site Scripting	CVE-2025-23992	2025-01-23 01:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

1110	-		-	-	Deserialization of Untrusted Data vulnerability in NotFound Muzaara Google Ads Report allows Object Injection. This issue affects Muzaara Google Ads Report: from n/a through 3.1.	CWE-502 Deserialization of Untrusted Data	CVE-2025-23914	2025-01-23 01:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed