Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 5.5 警告
Local 		クアルコム WCD9385 ファームウェア
fastconnect 6700 ファームウェア
fastconnect 7800 ファームウェア
wsa8845 ファームウェア
wsa8840 ファームウェア
sc8380xp ファームウェア
WSA8830 ファームウェア
sn… 		複数のクアルコム製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-126
CVE-2023-33078 2025-01-14 13:35 2023-05-17 Show GitHub Exploit DB Packet Storm
332 5.3 警告
Network 		IBM IBM CICS TX IBM の IBM CICS TX における観測可能な不一致に関する脆弱性 New CWE-203
CWE-204
CVE-2023-38362 2025-01-14 13:30 2023-11-3 Show GitHub Exploit DB Packet Storm
333 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla Foundation の Mozilla Firefox における脆弱性 New CWE-Other
その他 		CVE-2024-10941 2025-01-14 13:22 2024-05-14 Show GitHub Exploit DB Packet Storm
334 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-28912 2025-01-14 13:22 2024-04-9 Show GitHub Exploit DB Packet Storm
335 7.2 重要
Network 		マイクロソフト Azure Database for PostgreSQL Flexible Server Azure Database for PostgreSQL フレキシブル サーバー拡張機能の特権昇格の脆弱性 New CWE-77
CWE-noinfo
CVE-2024-43613 2025-01-14 13:22 2024-11-12 Show GitHub Exploit DB Packet Storm
336 6.2 警告
Adjacent 		マイクロソフト Azure Arc Cluster microsoft.azure.hybridnetwork Extension
Azure Arc Cluster microsoft.azstackhci.operator Extension
Azure Arc Cluster micr… 		Azure Arc 対応 Kubernetes 拡張機能クラスタースコープの特権昇格の脆弱性 New CWE-284
CWE-noinfo
CVE-2024-28917 2025-01-14 13:22 2024-04-9 Show GitHub Exploit DB Packet Storm
337 4.6 警告
Physics 		Linux Linux Kernel Linux の Linux Kernel における境界条件の判定に関する脆弱性 New CWE-193
境界条件の判定 		CVE-2024-53149 2025-01-14 12:04 2024-11-10 Show GitHub Exploit DB Packet Storm
338 5.3 警告
Network 		Huawei USG6000V ファームウェア
NGFW Module ファームウェア
Secospace USG6600 ファームウェア
NIP6800 ファームウェア
Secospace USG6500 ファームウェア
NIP6300 ファームウェア
IPS Module… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2020-1819 2025-01-14 11:48 2024-12-27 Show GitHub Exploit DB Packet Storm
339 4.3 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2021-4446 2025-01-14 11:48 2024-10-16 Show GitHub Exploit DB Packet Storm
340 7.5 重要
Network 		クアルコム CSRB31024 ファームウェア
AR8035 ファームウェア
fastconnect 6900 ファームウェア
QCA6391 ファームウェア
QCA6564AU ファームウェア
fastconnect 6700 ファームウェア
QCA6426 ファームウェア
… 		複数のクアルコム製品における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
CWE-401
CVE-2023-33086 2025-01-14 11:48 2023-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275631 - spey spey Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call. CWE-20
 Improper Input Validation  		CVE-2005-4846 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
275632 - appfluent_technology database_ids Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable. NVD-CWE-Other
CVE-2005-4076 2008-09-6 05:56 2005-12-8 Show GitHub Exploit DB Packet Storm
275633 - realnetworks realplayer ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPla… NVD-CWE-Other
CVE-2005-4126 2008-09-6 05:56 2005-12-9 Show GitHub Exploit DB Packet Storm
275634 - realnetworks realplayer ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPla… NVD-CWE-Other
CVE-2005-4130 2008-09-6 05:56 2005-12-9 Show GitHub Exploit DB Packet Storm
275635 - adaptive_technology_resource_centre atutor registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NO… NVD-CWE-Other
CVE-2005-4155 2008-09-6 05:56 2005-12-11 Show GitHub Exploit DB Packet Storm
275636 - mambo mambo_open_source_4.5 Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query … NVD-CWE-Other
CVE-2005-4156 2008-09-6 05:56 2005-12-11 Show GitHub Exploit DB Packet Storm
275637 - efiction_project efiction Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let parameter in a viewlist action to titles.php. NVD-CWE-Other
CVE-2005-4167 2008-09-6 05:56 2005-12-12 Show GitHub Exploit DB Packet Storm
275638 - efiction_project efiction Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the … NVD-CWE-Other
CVE-2005-4168 2008-09-6 05:56 2005-12-12 Show GitHub Exploit DB Packet Storm
275639 - efiction_project efiction The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .ph… NVD-CWE-Other
CVE-2005-4171 2008-09-6 05:56 2005-12-12 Show GitHub Exploit DB Packet Storm
275640 - efiction_project efiction eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error m… NVD-CWE-Other
CVE-2005-4172 2008-09-6 05:56 2005-12-12 Show GitHub Exploit DB Packet Storm