Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221 9.8 緊急
Network 		netentsec application security gateway netentsec の application security gateway における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-2021 2025-01-22 13:39 2024-03-1 Show GitHub Exploit DB Packet Storm
222 7.5 重要
Network 		Plone Foundation Plone Plone Foundation の Plone における不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
CWE-276
CVE-2024-22889 2025-01-22 13:39 2024-03-6 Show GitHub Exploit DB Packet Storm
223 5.3 警告
Network 		WonderCMS WonderCMS WonderCMS におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
CWE-918
CVE-2024-27563 2025-01-22 13:39 2024-03-5 Show GitHub Exploit DB Packet Storm
224 6.5 警告
Adjacent 		FRRouting Project FRRouting FRRouting Project の FRRouting における脆弱性 New CWE-noinfo
情報不足 		CVE-2024-27913 2025-01-22 13:39 2024-02-28 Show GitHub Exploit DB Packet Storm
225 9.8 緊急
Network 		XWiki xwiki XWiki の xwiki におけるコードインジェクションの脆弱性 New CWE-94
CWE-95
CVE-2024-31982 2025-01-22 13:39 2024-04-10 Show GitHub Exploit DB Packet Storm
226 9.8 緊急
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CVE-2024-3484 2025-01-22 13:38 2024-05-15 Show GitHub Exploit DB Packet Storm
227 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 New CWE-122
CWE-787
CVE-2025-21139 2025-01-22 12:25 2025-01-14 Show GitHub Exploit DB Packet Storm
228 7.8 重要
Local 		IBM IBM VIOS
IBM AIX 		IBM の IBM VIOS および IBM AIX における OS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2024-47115 2025-01-22 12:18 2024-12-5 Show GitHub Exploit DB Packet Storm
229 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 New CWE-122
CWE-787
CVE-2025-21137 2025-01-22 12:11 2025-01-14 Show GitHub Exploit DB Packet Storm
230 7.5 重要
Network 		株式会社アイ・オー・データ機器 UD-LT2 ファームウェア アイ・オー・データ製ルーターUD-LT2における複数の脆弱性 New CWE-78
CWE-Other
CVE-2025-20617
CVE-2025-22450
CVE-2025-23237 		2025-01-22 12:08 2025-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279331 - whitsoft_development slimftpd Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command. NVD-CWE-Other
CVE-2001-1131 2008-09-6 05:25 2001-08-21 Show GitHub Exploit DB Packet Storm
279332 - bsdi bsd_os Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. NVD-CWE-Other
CVE-2001-1133 2008-09-6 05:25 2001-08-21 Show GitHub Exploit DB Packet Storm
279333 - ascii_nt winwrapper_professional Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. NVD-CWE-Other
CVE-2001-1139 2008-09-6 05:25 2001-08-22 Show GitHub Exploit DB Packet Storm
279334 - argosoft ftp_server ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges. NVD-CWE-Other
CVE-2001-1142 2008-09-6 05:25 2001-07-12 Show GitHub Exploit DB Packet Storm
279335 - ibm db2_universal_database IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789. NVD-CWE-Other
CVE-2001-1143 2008-09-6 05:25 2001-07-11 Show GitHub Exploit DB Packet Storm
279336 - andries_brouwer util-linux The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a diff… NVD-CWE-Other
CVE-2001-1147 2008-09-6 05:25 2001-10-8 Show GitHub Exploit DB Packet Storm
279337 - panda panda_antivirus_platinum Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file. NVD-CWE-Other
CVE-2001-1149 2008-09-6 05:25 2001-08-21 Show GitHub Exploit DB Packet Storm
279338 - trend_micro officescan
virus_buster 		Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files. NVD-CWE-Other
CVE-2001-1150 2008-09-6 05:25 2001-08-22 Show GitHub Exploit DB Packet Storm
279339 - baltimore_technologies websweeper Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested… NVD-CWE-Other
CVE-2001-1152 2008-09-6 05:25 2001-09-5 Show GitHub Exploit DB Packet Storm
279340 - typsoft typsoft_ftp_server TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR. NVD-CWE-Other
CVE-2001-1156 2008-09-6 05:25 2001-10-8 Show GitHub Exploit DB Packet Storm