Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
351 5.4 警告
Network 		マイクロソフト Azure Migrate Azure Migrate のクロスサイト スクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-30053 2025-01-10 13:43 2024-05-14 Show GitHub Exploit DB Packet Storm
352 3.3 低
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window… 		Windows Remote Access Connection Manager の情報漏えいの脆弱性 CWE-125
CWE-noinfo
CVE-2024-26217 2025-01-10 12:30 2024-04-9 Show GitHub Exploit DB Packet Storm
353 7.2 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2012 		DHCP Server Service のリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-26202 2025-01-10 12:26 2024-04-9 Show GitHub Exploit DB Packet Storm
354 6.4 警告
Adjacent 		マイクロソフト Azure Migrate Azure Migrate のリモートでコードが実行される脆弱性 CWE-285
CWE-noinfo
CVE-2024-26193 2025-01-10 12:22 2024-04-9 Show GitHub Exploit DB Packet Storm
355 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Window… 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2024-30025 2025-01-10 12:20 2024-05-14 Show GitHub Exploit DB Packet Storm
356 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-125
CWE-noinfo
CVE-2024-26175 2025-01-10 12:19 2024-04-9 Show GitHub Exploit DB Packet Storm
357 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2019 		Windows カーネルの特権の昇格の脆弱性 CWE-59
CWE-noinfo
CVE-2024-30018 2025-01-10 12:13 2024-05-14 Show GitHub Exploit DB Packet Storm
358 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Window… 		リモート プロシージャ コール ランタイムのリモートでコードが実行される脆弱性 CWE-843
CWE-noinfo
CVE-2024-20678 2025-01-10 12:13 2024-04-9 Show GitHub Exploit DB Packet Storm
359 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2012 		Windows Hyper-V のサービス拒否の脆弱性 CWE-191
CWE-noinfo
CVE-2024-30011 2025-01-10 12:10 2024-05-14 Show GitHub Exploit DB Packet Storm
360 7.5 重要
Network 		マイクロソフト Microsoft .NET Framework .NET Framework の情報漏えいの脆弱性 CWE-209
CWE-209
CVE-2024-29059 2025-01-10 11:55 2024-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276551 - mailenable mailenable_enterprise
mailenable_professional 		MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands. NVD-CWE-Other
CVE-2004-2194 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276552 - ideal_science idealbb Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2004-2207 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276553 - ideal_science idealbb CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors. NVD-CWE-Other
CVE-2004-2208 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276554 - ideal_science idealbb SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2004-2209 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276555 - express-web express-web_content_management_system Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other e… NVD-CWE-Other
CVE-2004-2210 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276556 - mozilla firefox Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button. NVD-CWE-Other
CVE-2004-2225 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276557 - - - Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators. NVD-CWE-Other
CVE-2004-2234 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276558 - moodle moodle Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text. NVD-CWE-Other
CVE-2004-2235 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276559 - goollery goollery Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php. NVD-CWE-Other
CVE-2004-2246 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
276560 - goosequill audienceconnect Unknown vulnerability in the "admin of paypal email addresses" in AudienceConnect before 1.0.beta.21 has unknown impact and attack vectors. NVD-CWE-Other
CVE-2004-2247 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm