Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 6:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
411 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 New CWE-667
不適切なロック 		CVE-2024-56694 2025-01-14 17:06 2024-11-18 Show GitHub Exploit DB Packet Storm
412 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性 New CWE-754
例外的な状態における不適切なチェック 		CVE-2024-56776 2025-01-14 17:04 2024-09-23 Show GitHub Exploit DB Packet Storm
413 8.1 重要
Network 		マイクロソフト Microsoft Defender for Endpoint Android 上の Microsoft Defender for Endpoint のなりすましの脆弱性 New CWE-20
CWE-noinfo
CVE-2024-49057 2025-01-14 16:58 2024-12-10 Show GitHub Exploit DB Packet Storm
414 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 New - CVE-2024-56724 2025-01-14 16:58 2024-10-16 Show GitHub Exploit DB Packet Storm
415 7.4 重要
Local 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server 		Microsoft SharePoint のリモート コードが実行される脆弱性 New CWE-502
CWE-noinfo
CVE-2024-49070 2025-01-14 16:57 2024-12-10 Show GitHub Exploit DB Packet Storm
416 7.3 重要
Local 		マイクロソフト Microsoft System Center Microsoft System Center Elevation of Privilege Vulnerability New CWE-284
CWE-noinfo
CVE-2024-43594 2025-01-14 16:52 2024-12-10 Show GitHub Exploit DB Packet Storm
417 4.3 警告
Network 		wpmoose Yuki wpmoose の WordPress 用 Yuki におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-1943 2025-01-14 16:47 2024-02-28 Show GitHub Exploit DB Packet Storm
418 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性 New CWE-754
例外的な状態における不適切なチェック 		CVE-2024-56778 2025-01-14 16:41 2024-09-23 Show GitHub Exploit DB Packet Storm
419 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2024-56642 2025-01-14 16:40 2024-12-3 Show GitHub Exploit DB Packet Storm
420 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-noinfo
情報不足 		CVE-2024-56723 2025-01-14 16:39 2024-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275571 - egroupware egroupware Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to (1) preferences/inc/class.… CWE-79
Cross-site Scripting 		CVE-2007-5091 2008-09-6 06:29 2007-09-27 Show GitHub Exploit DB Packet Storm
275572 - id3lib id3lib The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the na… NVD-CWE-Other
CVE-2007-4460 2008-09-6 06:28 2007-08-22 Show GitHub Exploit DB Packet Storm
275573 - po4a po4a lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file. NVD-CWE-Other
CVE-2007-4462 2008-09-6 06:28 2007-08-22 Show GitHub Exploit DB Packet Storm
275574 - sshkeychain sshkeychain Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local users to gain privileges via unspecified vectors. NVD-CWE-Other
CVE-2007-4500 2008-09-6 06:28 2007-08-24 Show GitHub Exploit DB Packet Storm
275575 - sshkeychain sshkeychain Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (passwords) via unknown vectors, related to "poor protection." NVD-CWE-Other
CVE-2007-4501 2008-09-6 06:28 2007-08-24 Show GitHub Exploit DB Packet Storm
275576 - vavoom vavoom Buffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via (1) a long string in a chat message and pos… NVD-CWE-Other
CVE-2007-4534 2008-09-6 06:28 2007-08-25 Show GitHub Exploit DB Packet Storm
275577 - vavoom vavoom The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a string with a negative NewLen value within a certain UDP pack… NVD-CWE-Other
CVE-2007-4535 2008-09-6 06:28 2007-08-25 Show GitHub Exploit DB Packet Storm
275578 - apache geronimo The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, depl… CWE-287
Improper Authentication 		CVE-2007-4548 2008-09-6 06:28 2007-08-28 Show GitHub Exploit DB Packet Storm
275579 - novell groupwise_webaccess Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstra… CWE-79
Cross-site Scripting 		CVE-2007-4557 2008-09-6 06:28 2007-08-28 Show GitHub Exploit DB Packet Storm
275580 - polipo polipo Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) via certain network traffic associated with entities larger than 2 Gb. NVD-CWE-Other
CVE-2007-4626 2008-09-6 06:28 2007-08-31 Show GitHub Exploit DB Packet Storm