Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 5.3 警告
Network 		MantisBT Group MantisBT MantisBT Group の MantisBT における脆弱性 New CWE-200
CWE-noinfo
CVE-2024-34080 2025-01-17 12:02 2024-05-14 Show GitHub Exploit DB Packet Storm
212 8.8 重要
Network 		Brizy brizy Brizy の WordPress 用 brizy における危険なタイプのファイルの無制限アップロードに関する脆弱性 New CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-1311 2025-01-17 11:58 2024-03-13 Show GitHub Exploit DB Packet Storm
213 5.3 警告
Network 		zestard admin side data storage for contact form 7 zestard の WordPress 用 admin side data storage for contact form 7 における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-1779 2025-01-17 11:58 2024-02-23 Show GitHub Exploit DB Packet Storm
214 8.8 重要
Network 		Progress Software Corporation telerik report server Progress Software Corporation の telerik report server における信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
CWE-502
CVE-2024-1800 2025-01-17 11:58 2024-03-20 Show GitHub Exploit DB Packet Storm
215 7.5 重要
Network 		Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2024-13180 2025-01-17 11:58 2025-01-14 Show GitHub Exploit DB Packet Storm
216 - - Belledonne Communications Linphone-Desktop Belledonne Communications 製 Linphone-Desktop における NULL ポインタ参照の脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2025-0430 2025-01-17 11:56 2025-01-16 Show GitHub Exploit DB Packet Storm
217 9.8 緊急
Network 		Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 New CWE-74
CWE-74
CVE-2023-51653 2025-01-17 11:54 2023-12-20 Show GitHub Exploit DB Packet Storm
218 7.5 重要
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software Foundation の Apache DolphinScheduler におけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2023-51770 2025-01-17 11:54 2023-12-25 Show GitHub Exploit DB Packet Storm
219 5.4 警告
Network 		Brizy brizy Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1296 2025-01-17 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
220 7.5 重要
Network 		BoldGrid W3 Total Cache BoldGrid の WordPress 用 W3 Total Cache における脆弱性 New CWE-200
CWE-noinfo
CVE-2024-12008 2025-01-17 11:54 2024-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275261 - vwebserver vwebserver vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names. NVD-CWE-Other
CVE-2001-1249 2008-09-11 04:10 2001-06-29 Show GitHub Exploit DB Packet Storm
275262 - vwebserver vwebserver vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow. NVD-CWE-Other
CVE-2001-1250 2008-09-11 04:10 2001-06-29 Show GitHub Exploit DB Packet Storm
275263 - max_feoktistov
vwebserver 		small_http_server
vwebserver 		SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests. NVD-CWE-Other
CVE-2001-1251 2008-09-11 04:10 2001-06-29 Show GitHub Exploit DB Packet Storm
275264 - pgp keyserver Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin fo… NVD-CWE-Other
CVE-2001-1252 2008-09-11 04:10 2001-09-28 Show GitHub Exploit DB Packet Storm
275265 - com2001 alexis_server Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which … NVD-CWE-Other
CVE-2001-1254 2008-09-11 04:10 2001-09-27 Show GitHub Exploit DB Packet Storm
275266 - zope zope Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags. NVD-CWE-Other
CVE-2001-1278 2008-09-11 04:10 2001-10-10 Show GitHub Exploit DB Packet Storm
275267 - lbl tcpdump Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that tri… NVD-CWE-Other
CVE-2001-1279 2008-09-11 04:10 2001-07-17 Show GitHub Exploit DB Packet Storm
275268 - ipswitch imail POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system. NVD-CWE-Other
CVE-2001-1280 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
275269 - ipswitch imail Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" we… NVD-CWE-Other
CVE-2001-1281 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
275270 - ipswitch imail Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information. NVD-CWE-Other
CVE-2001-1282 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm