Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
401 6.5 警告
Network 		デル PowerProtect Data Manager デルの PowerProtect Data Manager における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-25971 2025-01-28 14:30 2024-03-28 Show GitHub Exploit DB Packet Storm
402 4.3 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window… 		Windows HTML プラットフォームのセキュリティ機能のバイパスの脆弱性 CWE-41
CWE-noinfo
CVE-2025-21269 2025-01-28 14:28 2025-01-14 Show GitHub Exploit DB Packet Storm
403 6.5 警告
Adjacent 		Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37030 2025-01-28 14:26 2023-06-28 Show GitHub Exploit DB Packet Storm
404 6.5 警告
Adjacent 		Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37033 2025-01-28 14:26 2023-06-28 Show GitHub Exploit DB Packet Storm
405 7 重要
Local 		クアルコム sa8255p ファームウェア
snapdragon auto 5g modem-rf gen 2 ファームウェア
WSA8835 ファームウェア
sa8775p ファームウェア
qam8775p ファームウェア
qca6698aq ファームウェア
w… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2023-43543 2025-01-28 14:26 2023-09-19 Show GitHub Exploit DB Packet Storm
406 5.4 警告
Network 		getshortcodes shortcodes ultimate getshortcodes の WordPress 用 shortcodes ultimate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0792 2025-01-28 14:26 2024-02-29 Show GitHub Exploit DB Packet Storm
407 6.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window… 		Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21265 2025-01-28 14:23 2025-01-14 Show GitHub Exploit DB Packet Storm
408 6.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window… 		Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21260 2025-01-28 14:19 2025-01-14 Show GitHub Exploit DB Packet Storm
409 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2025 		Windows アプリ パッケージ インストーラーの特権昇格の脆弱性 CWE-285
CWE-noinfo
CVE-2025-21275 2025-01-28 14:15 2025-01-14 Show GitHub Exploit DB Packet Storm
410 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21270 2025-01-28 14:07 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274621 - mantis mantis SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-3336 2011-03-8 11:26 2005-10-27 Show GitHub Exploit DB Packet Storm
274622 - norman_ramsey noweb noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm. NVD-CWE-Other
CVE-2005-3342 2011-03-8 11:26 2005-12-31 Show GitHub Exploit DB Packet Storm
274623 - trend_micro pc-cillin_2005 The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service (d… NVD-CWE-Other
CVE-2005-3360 2011-03-8 11:26 2005-12-15 Show GitHub Exploit DB Packet Storm
274624 - luca_deri ntop The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbi… NVD-CWE-Other
CVE-2005-3387 2011-03-8 11:26 2005-11-1 Show GitHub Exploit DB Packet Storm
274625 - snitz_communications snitz_forums_2000 Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method. NVD-CWE-Other
CVE-2005-3411 2011-03-8 11:26 2005-11-2 Show GitHub Exploit DB Packet Storm
274626 - 10-4_aps asp_fast_forum Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter. NVD-CWE-Other
CVE-2005-3422 2011-03-8 11:26 2005-11-2 Show GitHub Exploit DB Packet Storm
274627 - gnu gnump3d Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425. NVD-CWE-Other
CVE-2005-3424 2011-03-8 11:26 2005-11-2 Show GitHub Exploit DB Packet Storm
274628 - f-secure f-secure_anti-virus
internet_gatekeeper 		Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read… NVD-CWE-Other
CVE-2005-3468 2011-03-8 11:26 2005-11-3 Show GitHub Exploit DB Packet Storm
274629 - - - Directory traversal vulnerability in the ruleset view for MailWatch for MailScanner 1.0.2 allows remote attackers to access arbitrary files. NVD-CWE-Other
CVE-2005-3471 2011-03-8 11:26 2005-11-3 Show GitHub Exploit DB Packet Storm
274630 - sun java_system_communications_express Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files. NVD-CWE-Other
CVE-2005-3472 2011-03-8 11:26 2005-11-3 Show GitHub Exploit DB Packet Storm