Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2141 7.5 重要
Network
Huawei HarmonyOS
EMUI
Huawei の EMUI および HarmonyOS における脆弱性 CWE-840
CWE-noinfo
CVE-2024-54098 2025-01-14 15:45 2024-12-12 Show GitHub Exploit DB Packet Storm
2142 9.8 緊急
Network
XWiki xwiki XWiki の xwiki におけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ
CVE-2024-55663 2025-01-14 15:45 2024-12-12 Show GitHub Exploit DB Packet Storm
2143 9.8 緊急
Network
code-projects Online  Shoe Store code-projects の Online Shoe Store における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2025-0208 2025-01-14 15:45 2025-01-4 Show GitHub Exploit DB Packet Storm
2144 9.8 緊急
Network
school faculty scheduling system project school faculty scheduling system campcodes の School Faculty Scheduling System における脆弱性 CWE-73
CWE-Other
CVE-2025-0211 2025-01-14 15:45 2025-01-4 Show GitHub Exploit DB Packet Storm
2145 7.3 重要
Local
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Window…
WmsRepair サービスの特権昇格の脆弱性 CWE-284
CWE-59
CWE-noinfo
CVE-2024-49107 2025-01-14 15:39 2024-12-10 Show GitHub Exploit DB Packet Storm
2146 4.6 警告
Physics
マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&…
Windows モバイル ブロードバンド ドライバーの情報漏えいの脆弱性 CWE-20
CWE-noinfo
CVE-2024-49087 2025-01-14 15:37 2024-12-10 Show GitHub Exploit DB Packet Storm
2147 8.8 重要
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-23
CWE-noinfo
CVE-2024-30010 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
2148 8.8 重要
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&…
Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-30017 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
2149 7.5 重要
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Window…
Windows ルーティングとリモート アクセス サービス (RRAS) のリモートでコードが実行される脆弱性 CWE-197
CWE-noinfo
CVE-2024-30024 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
2150 7.8 重要
Local
マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server 2022
Windows DWM Core ライブラリの特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-30035 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282381 - apc powerchute PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory. NVD-CWE-Other
CVE-2002-1924 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282382 - tiny_software tiny_personal_firewall Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Persona… NVD-CWE-Other
CVE-2002-1925 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282383 - aquonics_scripting aquonics_file_manager Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string. NVD-CWE-Other
CVE-2002-1926 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282384 - software602 602pro_lan_suite 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension. NVD-CWE-Other
CVE-2002-1928 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282385 - php_arena pafiledb Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (… NVD-CWE-Other
CVE-2002-1929 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282386 - an an-httpd Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username. NVD-CWE-Other
CVE-2002-1930 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282387 - php_arena pafiledb Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string. NVD-CWE-Other
CVE-2002-1931 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282388 - microsoft windows_2000_terminal_services The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal s… NVD-CWE-Other
CVE-2002-1933 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282389 - utstarcom bas_1000 UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account… NVD-CWE-Other
CVE-2002-1936 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
282390 - symantec firewall_vpn_appliance_100
firewall_vpn_appliance_200
firewall_vpn_appliance_200r
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address … NVD-CWE-Other
CVE-2002-1937 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm