Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
361 9.9 緊急
Network 		FIT2CLOUD jumpserver FIT2CLOUD の jumpserver におけるコードインジェクションの脆弱性 CWE-94
CWE-94
CVE-2024-29201 2025-01-10 11:51 2024-03-29 Show GitHub Exploit DB Packet Storm
362 9.6 緊急
Network 		Traccar Ltd Traccar Traccar Ltd の Traccar における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
CWE-434
CVE-2024-31214 2025-01-10 11:51 2024-04-10 Show GitHub Exploit DB Packet Storm
363 8.8 重要
Network 		XWiki xwiki XWiki の xwiki におけるコードインジェクションの脆弱性 CWE-94
CWE-95
CVE-2024-31465 2025-01-10 11:51 2024-04-10 Show GitHub Exploit DB Packet Storm
364 6.3 警告
Network 		argoproj argo cd argoproj の argo cd における不正な認証に関する脆弱性 CWE-863
CWE-863
CVE-2024-31990 2025-01-10 11:51 2024-04-15 Show GitHub Exploit DB Packet Storm
365 7.8 重要
Local 		デル OpenManage Server Administrator デルの OpenManage Server Administrator における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2024-37130 2025-01-10 11:51 2024-06-11 Show GitHub Exploit DB Packet Storm
366 8.8 重要
Network 		Cohesive Networks VNS3 Cohesive Networks の VNS3 における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-8809 2025-01-10 11:51 2024-11-22 Show GitHub Exploit DB Packet Storm
367 5.5 警告
Local 		クアルコム SD 835 ファームウェア
SD 845 ファームウェア
SD 820 ファームウェア
SD 820A ファームウェア
SD 850 ファームウェア
SD 450 ファームウェア
SD 625 ファームウェア 		複数のクアルコム製品における脆弱性 CWE-200
CWE-noinfo
CVE-2017-18307 2025-01-10 11:49 2024-11-26 Show GitHub Exploit DB Packet Storm
368 7.8 重要
Local 		クアルコム CSRA6620 ファームウェア
AQT1000 ファームウェア
AR8031 ファームウェア
APQ8037 ファームウェア
home hub 100 ファームウェア
fastconnect 6800 ファームウェア
9205 lte ファームウェア… 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-120
CWE-787
CVE-2023-28547 2025-01-10 11:49 2023-03-17 Show GitHub Exploit DB Packet Storm
369 5.4 警告
Network 		Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0376 2025-01-10 11:49 2024-04-9 Show GitHub Exploit DB Packet Storm
370 7.5 重要
Network 		argoproj argo cd argoproj の argo cd における脆弱性 CWE-787
CWE-noinfo
CVE-2024-21661 2025-01-10 11:49 2024-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275911 - linksys wrt54g Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attacke… NVD-CWE-Other
CVE-2005-2916 2008-09-6 05:52 2005-09-15 Show GitHub Exploit DB Packet Storm
275912 - microsoft frontpage Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page. NVD-CWE-Other
CVE-2005-2143 2008-09-6 05:51 2005-07-5 Show GitHub Exploit DB Packet Storm
275913 - prevx prevx_pro_2005 Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file. NVD-CWE-Other
CVE-2005-2144 2008-09-6 05:51 2005-07-5 Show GitHub Exploit DB Packet Storm
275914 - prevx prevx_pro_2005 The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sen… NVD-CWE-Other
CVE-2005-2145 2008-09-6 05:51 2005-07-5 Show GitHub Exploit DB Packet Storm
275915 - ssh tectia_server SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access t… NVD-CWE-Other
CVE-2005-2146 2008-09-6 05:51 2005-07-5 Show GitHub Exploit DB Packet Storm
275916 - edgewall_software trac Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts. NVD-CWE-Other
CVE-2005-2147 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
275917 - double_precision_incorporated courier_mail_server spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption. NVD-CWE-Other
CVE-2005-2151 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
275918 - geeklog geeklog SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article. NVD-CWE-Other
CVE-2005-2152 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
275919 - osticket osticket_sts SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable. NVD-CWE-Other
CVE-2005-2153 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
275920 - osticket osticket_sts PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc pa… NVD-CWE-Other
CVE-2005-2154 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm