Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210391 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3982 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
210392 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3981 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
210393 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3980 2010-01-28 12:15 2009-12-15 Show GitHub Exploit DB Packet Storm
210394 10 危険 アドビシステムズ - Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3792 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
210395 5 警告 アドビシステムズ - Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3791 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
210396 5.8 警告 PostgreSQL.org
ターボリナックス
サン・マイクロシステムズ		 - PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-4034 2010-01-26 11:48 2009-12-15 Show GitHub Exploit DB Packet Storm
210397 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4031 2010-01-26 11:47 2009-11-29 Show GitHub Exploit DB Packet Storm
210398 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3613 2010-01-26 11:38 2009-10-19 Show GitHub Exploit DB Packet Storm
210399 4.6 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の NFSv4 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3286 2010-01-26 11:38 2009-09-22 Show GitHub Exploit DB Packet Storm
210400 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-2908 2010-01-26 11:38 2009-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 6.5 MEDIUM
Network 		- - A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user w… New CWE-284
Improper Access Control 		CVE-2025-23367 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
22 - - - VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated… New - CVE-2025-22218 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
23 3.5 LOW
Network 		- - A vulnerability classified as problematic has been found in Maybecms 1.2. This affects an unknown part of the file /mb/admin/index.php?u=article-edit of the component Add Article. The manipulation of… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-0871 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
24 - - - DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web s… New - CVE-2024-55417 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
25 - - - DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. New - CVE-2024-55416 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
26 - - - DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. New - CVE-2024-55415 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
27 - - - A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video f… New - CVE-2024-53615 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
28 4.3 MEDIUM
Network 		- - The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.25.10 via the 'elementor-template' shortcode. This makes… New CWE-200
Information Exposure 		CVE-2024-8494 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
29 9.8 CRITICAL
Network 		- - The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the… New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-13742 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
30 8.8 HIGH
Network 		- - The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, … New CWE-352
 Origin Validation Error 		CVE-2024-13720 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm