Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201 7.5 重要
Network
Fedora Project
日本電気
ISC, Inc.
NEC Multimedia OLAP for 映像分析サービス
Fedora
ESMPRO/ServerAgent
BIND
NetApp の ONTAP (旧 Clustered Data ONTAP) 等複数ベンダの製品における脆弱性 Update CWE-noinfo
情報不足
CVE-2023-4408 2025-01-17 13:10 2023-08-18 Show GitHub Exploit DB Packet Storm
202 9.8 緊急
Network
Apache Software Foundation Apache Struts Apache Struts 2 における外部からアクセス可能なファイルの脆弱性 (S2-066) Update CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2023-50164 2025-01-17 12:58 2023-12-8 Show GitHub Exploit DB Packet Storm
203 9.8 緊急
Network
Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 New CWE-74
CWE-74
CVE-2023-51388 2025-01-17 12:08 2023-12-18 Show GitHub Exploit DB Packet Storm
204 9.8 緊急
Network
Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CWE-288
CVE-2024-13179 2025-01-17 12:08 2025-01-14 Show GitHub Exploit DB Packet Storm
205 5.4 警告
Network
Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13183 2025-01-17 12:08 2025-01-10 Show GitHub Exploit DB Packet Storm
206 4.3 警告
Network
Progress Software Corporation MOVEit Transfer Progress Software Corporation の MOVEit Transfer における脆弱性 New CWE-778
CWE-Other
CVE-2024-2291 2025-01-17 12:08 2024-03-20 Show GitHub Exploit DB Packet Storm
207 4.8 警告
Network
MantisBT Group MantisBT MantisBT Group の MantisBT におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-34081 2025-01-17 12:08 2024-05-14 Show GitHub Exploit DB Packet Storm
208 8.8 重要
Network
oretnom23 Laundry Shop Management System Oretnom23 の Laundry Shop Management System における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-3466 2025-01-17 12:08 2024-04-8 Show GitHub Exploit DB Packet Storm
209 4.3 警告
Network
Brizy brizy Brizy の WordPress 用 brizy における認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2024-3711 2025-01-17 12:02 2024-05-23 Show GitHub Exploit DB Packet Storm
210 9.8 緊急
Network
Apache Software Foundation Apache Xerces-C++ Apache Software Foundation の Apache Xerces-C++ における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2024-23807 2025-01-17 12:02 2024-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277991 - bodo_bauer bbgallery Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags. NVD-CWE-Other
CVE-2002-1901 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277992 - markus_triska cgiforum CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent. NVD-CWE-Other
CVE-2002-1902 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277993 - university_of_washington pine Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information. NVD-CWE-Other
CVE-2002-1903 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277994 - gaztek ghttpd Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request. NVD-CWE-Other
CVE-2002-1904 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277995 - telcondex simplewebserver TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request. NVD-CWE-Other
CVE-2002-1907 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277996 - click2learn ingenium_learning_management_system Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the admi… NVD-CWE-Other
CVE-2002-1909 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277997 - zonelabs zonealarm ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE… NVD-CWE-Other
CVE-2002-1911 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277998 - myphpnuke myphpnuke phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable. NVD-CWE-Other
CVE-2002-1913 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
277999 - pirch pirch_irc
ruspirch
Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filena… NVD-CWE-Other
CVE-2002-1916 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
278000 - geeklog geeklog CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and a… NVD-CWE-Other
CVE-2002-1917 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm