Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
391 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. i21 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の i21 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4248 2025-01-28 14:37 2024-04-27 Show GitHub Exploit DB Packet Storm
392 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. i21 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の i21 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4497 2025-01-28 14:37 2024-05-5 Show GitHub Exploit DB Packet Storm
393 4.2 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window… 		Windows BitLocker の情報漏えいの脆弱性 CWE-636
CWE-noinfo
CVE-2025-21210 2025-01-28 14:36 2025-01-14 Show GitHub Exploit DB Packet Storm
394 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21273 2025-01-28 14:34 2025-01-14 Show GitHub Exploit DB Packet Storm
395 5.4 警告
Network 		Jegtheme Jeg Elementor Kit Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-29101 2025-01-28 14:33 2024-03-19 Show GitHub Exploit DB Packet Storm
396 5.3 警告
Network 		kodezen academy lms kodezen の WordPress 用 academy lms における脆弱性 CWE-200
CWE-noinfo
CVE-2024-35171 2025-01-28 14:33 2024-05-14 Show GitHub Exploit DB Packet Storm
397 5.4 警告
Network 		JetBrains TeamCity JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-36373 2025-01-28 14:33 2024-05-29 Show GitHub Exploit DB Packet Storm
398 8.1 重要
Network 		JetBrains TeamCity JetBrains の TeamCity における不正な認証に関する脆弱性 CWE-863
CWE-863
CVE-2024-36376 2025-01-28 14:33 2024-05-29 Show GitHub Exploit DB Packet Storm
399 5.4 警告
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2255 2025-01-28 14:30 2024-03-20 Show GitHub Exploit DB Packet Storm
400 7.5 重要
Network 		Linux Foundation Magma Linux Foundation の Magma における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2024-24416 2025-01-28 14:30 2024-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274171 - sun java_system_directory_server Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which can cause an incorrect application of policy and allows remote attackers to bypass… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1995 2011-03-8 12:08 2008-04-29 Show GitHub Exploit DB Packet Storm
274172 - alaxala ax_router Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related i… CWE-20
 Improper Input Validation  		CVE-2008-2171 2011-03-8 12:08 2008-05-14 Show GitHub Exploit DB Packet Storm
274173 - hitachi gr2000
gr3000
gr4000 		Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related i… CWE-20
 Improper Input Validation  		CVE-2008-2172 2011-03-8 12:08 2008-05-14 Show GitHub Exploit DB Packet Storm
274174 - openwsman openwsman The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors. CWE-94
Code Injection 		CVE-2008-2233 2011-03-8 12:08 2008-08-19 Show GitHub Exploit DB Packet Storm
274175 - apple safari Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restricti… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-2306 2011-03-8 12:08 2008-06-24 Show GitHub Exploit DB Packet Storm
274176 - clam_anti-virus clamav libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access." CWE-399
 Resource Management Errors 		CVE-2008-1389 2011-03-8 12:07 2008-09-5 Show GitHub Exploit DB Packet Storm
274177 - ibm websphere_mq MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1592 2011-03-8 12:07 2008-04-1 Show GitHub Exploit DB Packet Storm
274178 - ibm aix Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to missing checks i… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1596 2011-03-8 12:07 2008-04-1 Show GitHub Exploit DB Packet Storm
274179 - ibm aix The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2008-1598 2011-03-8 12:07 2008-04-1 Show GitHub Exploit DB Packet Storm
274180 - hp system_management_homepage Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified v… CWE-79
Cross-site Scripting 		CVE-2008-1663 2011-03-8 12:07 2008-07-9 Show GitHub Exploit DB Packet Storm