Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
331 5.5 警告
Local
クアルコム WCD9385 ファームウェア
fastconnect 6700 ファームウェア
fastconnect 7800 ファームウェア
wsa8845 ファームウェア
wsa8840 ファームウェア
sc8380xp ファームウェア
WSA8830 ファームウェア
sn…
複数のクアルコム製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-126
CVE-2023-33078 2025-01-14 13:35 2023-05-17 Show GitHub Exploit DB Packet Storm
332 5.3 警告
Network
IBM IBM CICS TX IBM の IBM CICS TX における観測可能な不一致に関する脆弱性 New CWE-203
CWE-204
CVE-2023-38362 2025-01-14 13:30 2023-11-3 Show GitHub Exploit DB Packet Storm
333 6.5 警告
Network
Mozilla Foundation Mozilla Firefox Mozilla Foundation の Mozilla Firefox における脆弱性 New CWE-Other
その他
CVE-2024-10941 2025-01-14 13:22 2024-05-14 Show GitHub Exploit DB Packet Storm
334 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-28912 2025-01-14 13:22 2024-04-9 Show GitHub Exploit DB Packet Storm
335 7.2 重要
Network
マイクロソフト Azure Database for PostgreSQL Flexible Server Azure Database for PostgreSQL フレキシブル サーバー拡張機能の特権昇格の脆弱性 New CWE-77
CWE-noinfo
CVE-2024-43613 2025-01-14 13:22 2024-11-12 Show GitHub Exploit DB Packet Storm
336 6.2 警告
Adjacent
マイクロソフト Azure Arc Cluster microsoft.azure.hybridnetwork Extension
Azure Arc Cluster microsoft.azstackhci.operator Extension
Azure Arc Cluster micr…
Azure Arc 対応 Kubernetes 拡張機能クラスタースコープの特権昇格の脆弱性 New CWE-284
CWE-noinfo
CVE-2024-28917 2025-01-14 13:22 2024-04-9 Show GitHub Exploit DB Packet Storm
337 4.6 警告
Physics
Linux Linux Kernel Linux の Linux Kernel における境界条件の判定に関する脆弱性 New CWE-193
境界条件の判定
CVE-2024-53149 2025-01-14 12:04 2024-11-10 Show GitHub Exploit DB Packet Storm
338 5.3 警告
Network
Huawei USG6000V ファームウェア
NGFW Module ファームウェア
Secospace USG6600 ファームウェア
NIP6800 ファームウェア
Secospace USG6500 ファームウェア
NIP6300 ファームウェア
IPS Module…
複数の Huawei 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2020-1819 2025-01-14 11:48 2024-12-27 Show GitHub Exploit DB Packet Storm
339 4.3 警告
Network
WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor における認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2021-4446 2025-01-14 11:48 2024-10-16 Show GitHub Exploit DB Packet Storm
340 7.5 重要
Network
クアルコム CSRB31024 ファームウェア
AR8035 ファームウェア
fastconnect 6900 ファームウェア
QCA6391 ファームウェア
QCA6564AU ファームウェア
fastconnect 6700 ファームウェア
QCA6426 ファームウェア
複数のクアルコム製品における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
CWE-401
CVE-2023-33086 2025-01-14 11:48 2023-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275961 - - - Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) … NVD-CWE-Other
CVE-2005-2242 2008-09-6 05:51 2005-07-12 Show GitHub Exploit DB Packet Storm
275962 - cisco call_manager Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote… NVD-CWE-Other
CVE-2005-2243 2008-09-6 05:51 2005-07-12 Show GitHub Exploit DB Packet Storm
275963 - sven-ove_bjerkan downloadprotect Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder. NVD-CWE-Other
CVE-2005-2248 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275964 - jinzora jinzora Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability. NVD-CWE-Other
CVE-2005-2249 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275965 - nokia affix Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share. NVD-CWE-Other
CVE-2005-2250 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275966 - gianluca_baldo phpauction PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID. NVD-CWE-Other
CVE-2005-2252 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275967 - gianluca_baldo phpauction SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the… NVD-CWE-Other
CVE-2005-2253 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275968 - gianluca_baldo phpauction Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan param… NVD-CWE-Other
CVE-2005-2255 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275969 - phppgadmin phppgadmin Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter. NVD-CWE-Other
CVE-2005-2256 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm
275970 - squitosoft squito_gallery PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter. NVD-CWE-Other
CVE-2005-2258 2008-09-6 05:51 2005-07-13 Show GitHub Exploit DB Packet Storm