Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
411 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21289 2025-01-27 16:29 2025-01-14 Show GitHub Exploit DB Packet Storm
412 7.5 重要
Network 		paddlepaddle paddlepaddle paddlepaddle における脆弱性 CWE-73
CWE-Other
CVE-2024-1603 2025-01-27 16:22 2024-03-23 Show GitHub Exploit DB Packet Storm
413 6 警告
Local 		Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2024-2552 2025-01-27 16:22 2024-11-14 Show GitHub Exploit DB Packet Storm
414 7.5 重要
Network 		Open5GS Open5GS Open5GS における到達可能なアサーションに関する脆弱性 CWE-617
CWE-617
CVE-2024-24427 2025-01-27 16:22 2024-01-25 Show GitHub Exploit DB Packet Storm
415 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows インストーラーの特権の昇格の脆弱性 CWE-269
CWE-noinfo
CVE-2025-21287 2025-01-27 16:22 2025-01-14 Show GitHub Exploit DB Packet Storm
416 7.8 重要
Local 		openatom openharmony openatom の openharmony における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-28951 2025-01-27 16:22 2024-04-2 Show GitHub Exploit DB Packet Storm
417 9.8 緊急
Network 		Sapplica Sentrifugo Sapplica の Sentrifugo における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-29871 2025-01-27 16:22 2024-03-21 Show GitHub Exploit DB Packet Storm
418 6.1 警告
Network 		Themify themify builder Themify の WordPress 用 Themify Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-13319 2025-01-27 16:18 2025-01-22 Show GitHub Exploit DB Packet Storm
419 5.4 警告
Network 		aipower aipower WordPress 用 aipower におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-13360 2025-01-27 16:17 2025-01-22 Show GitHub Exploit DB Packet Storm
420 7.5 重要
Network 		GamiPress GamiPress - Vimeo integration GamiPress の WordPress 用 GamiPress - Vimeo integration における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-13496 2025-01-27 16:17 2025-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274951 - apple iphone_os Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS… NVD-CWE-noinfo
CVE-2009-2204 2010-03-30 13:00 2009-08-4 Show GitHub Exploit DB Packet Storm
274952 - typo3 ws_ecard Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors. CWE-22
Path Traversal 		CVE-2009-4740 2010-03-30 01:42 2010-03-27 Show GitHub Exploit DB Packet Storm
274953 - ibm aix bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial … NVD-CWE-Other
CVE-2010-1124 2010-03-29 13:00 2010-03-27 Show GitHub Exploit DB Packet Storm
274954 - jbmc-software directadmin JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this tem… CWE-59
Link Following 		CVE-2009-1526 2010-03-29 13:00 2009-05-6 Show GitHub Exploit DB Packet Storm
274955 - skype skype Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2009-4741 2010-03-29 13:00 2010-03-27 Show GitHub Exploit DB Packet Storm
274956 - arwscripts fonts_script Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. … CWE-22
Path Traversal 		CVE-2010-0613 2010-03-26 14:37 2010-02-12 Show GitHub Exploit DB Packet Storm
274957 - openttd openttd Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service (daemon crash) via certain game a… NVD-CWE-noinfo
CVE-2009-4007 2010-03-26 14:34 2009-12-29 Show GitHub Exploit DB Packet Storm
274958 - linux.thai libthai Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/t… CWE-189
Numeric Errors 		CVE-2009-4012 2010-03-26 14:34 2010-01-20 Show GitHub Exploit DB Packet Storm
274959 - 68k audiofile Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-5824 2010-03-26 14:24 2009-01-3 Show GitHub Exploit DB Packet Storm
274960 - tristan_barczyk klonews Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. CWE-79
Cross-site Scripting 		CVE-2010-1112 2010-03-26 13:00 2010-03-26 Show GitHub Exploit DB Packet Storm