Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 5.3 警告
Network 		ZITADEL ZITADEL ZITADEL における脆弱性 CWE-200
CWE-noinfo
CVE-2024-32967 2025-01-9 10:33 2024-05-1 Show GitHub Exploit DB Packet Storm
332 5.4 警告
Network 		ThimPress LearnPress ThimPress の WordPress 用 LearnPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3560 2025-01-9 10:33 2024-04-19 Show GitHub Exploit DB Packet Storm
333 5.4 警告
Network 		Royal Elementor Addons Royal Elementor Addons and Templates Royal Elementor Addons の WordPress 用 Royal Elementor Addons and Templates におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4087 2025-01-9 10:33 2024-06-1 Show GitHub Exploit DB Packet Storm
334 7.5 重要
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software Corporation の MOVEit Automation Web Admin における脆弱性 CWE-327
CWE-noinfo
CVE-2024-4563 2025-01-9 10:33 2024-05-22 Show GitHub Exploit DB Packet Storm
335 4.3 警告
Network 		Wpmet elementskit Wpmet の WordPress 用 elementskit における脆弱性 CWE-200
CWE-noinfo
CVE-2024-7063 2025-01-9 10:33 2024-08-15 Show GitHub Exploit DB Packet Storm
336 7.2 重要
Network 		マイクロソフト Azure Database for PostgreSQL Flexible Server Azure Database for PostgreSQL フレキシブル サーバー拡張機能の特権昇格の脆弱性 CWE-77
CWE-noinfo
CVE-2024-49042 2025-01-9 10:15 2024-11-12 Show GitHub Exploit DB Packet Storm
337 4.3 警告
Network 		Royal Elementor Addons Royal Elementor Addons and Templates Royal Elementor Addons の WordPress 用 Royal Elementor Addons and Templates におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-0512 2025-01-9 10:10 2024-02-29 Show GitHub Exploit DB Packet Storm
338 7.8 重要
Local 		- デルの Dell Digital Delivery における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-122
CVE-2024-0156 2025-01-9 10:10 2024-03-4 Show GitHub Exploit DB Packet Storm
339 9.8 緊急
Network 		1000projects attendance tracking management system 1000projects の attendance tracking management system における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2024-12898 2025-01-9 10:10 2024-12-23 Show GitHub Exploit DB Packet Storm
340 6.4 警告
Network 		Heateor Sassy Social Share Heateor の WordPress 用 Sassy Social Share におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1448 2025-01-9 10:10 2024-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276851 - aquonics_scripting aquonics_file_manager Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string. NVD-CWE-Other
CVE-2002-1926 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276852 - software602 602pro_lan_suite 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension. NVD-CWE-Other
CVE-2002-1928 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276853 - php_arena pafiledb Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (… NVD-CWE-Other
CVE-2002-1929 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276854 - an an-httpd Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username. NVD-CWE-Other
CVE-2002-1930 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276855 - php_arena pafiledb Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string. NVD-CWE-Other
CVE-2002-1931 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276856 - microsoft windows_2000_terminal_services The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal s… NVD-CWE-Other
CVE-2002-1933 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276857 - utstarcom bas_1000 UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account… NVD-CWE-Other
CVE-2002-1936 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276858 - symantec firewall_vpn_appliance_100
firewall_vpn_appliance_200
firewall_vpn_appliance_200r 		Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address … NVD-CWE-Other
CVE-2002-1937 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276859 - virgil cgi_scanner Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (ZIELPORT) parameters. NVD-CWE-Other
CVE-2002-1938 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
276860 - flashfxp flashfxp FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties. NVD-CWE-Other
CVE-2002-1939 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm