Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
361 4.3 警告
Network
averta Master Slider averta の WordPress 用 Master Slider におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2023-6326 2025-01-9 09:38 2023-11-27 Show GitHub Exploit DB Packet Storm
362 7.8 重要
Local
Telerik Telerik UI for WinForms Telerik の Telerik UI for WinForms における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2024-10013 2025-01-8 20:45 2024-11-13 Show GitHub Exploit DB Packet Storm
363 4.3 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性 CWE-359
CWE-noinfo
CVE-2024-49025 2025-01-8 20:22 2024-11-14 Show GitHub Exploit DB Packet Storm
364 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-28908 2025-01-8 20:15 2024-04-9 Show GitHub Exploit DB Packet Storm
365 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Windows USB プリント ドライバーの特権の昇格の脆弱性 CWE-170
CWE-noinfo
CVE-2024-21442 2025-01-8 20:12 2024-03-12 Show GitHub Exploit DB Packet Storm
366 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2024-53156 2025-01-8 20:07 2024-09-14 Show GitHub Exploit DB Packet Storm
367 7.1 重要
Local
Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2024-53150 2025-01-8 20:06 2024-11-25 Show GitHub Exploit DB Packet Storm
368 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2024-50292 2025-01-8 20:04 2024-11-5 Show GitHub Exploit DB Packet Storm
369 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2024-40962 2025-01-8 20:02 2024-06-13 Show GitHub Exploit DB Packet Storm
370 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2024-26928 2025-01-8 20:00 2024-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276371 - positive_software h-sphere Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fnam… NVD-CWE-Other
CVE-2003-1247 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276372 - positive_software h-sphere H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request. NVD-CWE-Other
CVE-2003-1248 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276373 - businessobjects webintelligence WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions. NVD-CWE-Other
CVE-2003-1249 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276374 - efficient_networks 5861_dsl_router Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service (crash) via a flood of TCP SYN pack… NVD-CWE-Other
CVE-2003-1250 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276375 - nx n_x_web_content_management_system_2002 The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via … NVD-CWE-Other
CVE-2003-1251 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276376 - kelli_shaver s8forum register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, w… NVD-CWE-Other
CVE-2003-1252 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276377 - sangwan_kim bookmark4u PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load… CWE-94
Code Injection
CVE-2003-1253 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276378 - - - Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1) head.php, (2) apb_common.php, or (3) apb_view_class.php by modifying the APB_SETTINGS parameter to refe… NVD-CWE-Other
CVE-2003-1254 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276379 - e-theni e-theni aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php. NVD-CWE-Other
CVE-2003-1256 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
276380 - e-theni e-theni Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2003-1256 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm