Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
421 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-53154 2025-01-14 10:33 2024-11-14 Show GitHub Exploit DB Packet Storm
422 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2024-56653 2025-01-14 10:33 2024-12-12 Show GitHub Exploit DB Packet Storm
423 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-56730 2025-01-14 10:33 2024-11-16 Show GitHub Exploit DB Packet Storm
424 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における初期化されていないリソースの使用に関する脆弱性 New CWE-908
初期化されていないリソースの使用 		CVE-2024-56739 2025-01-14 10:33 2024-11-11 Show GitHub Exploit DB Packet Storm
425 5.3 警告
Network 		IBM Engineering Lifecycle Optimization - Engineering Insights IBM の Engineering Lifecycle Optimization - Engineering Insights におけるエラーメッセージによる情報漏えいに関する脆弱性 New CWE-209
エラーメッセージによる情報漏えい 		CVE-2024-39725 2025-01-14 10:18 2024-12-24 Show GitHub Exploit DB Packet Storm
426 9.8 緊急
Network 		IBM Engineering Lifecycle Optimization - Engineering Insights IBM の Engineering Lifecycle Optimization - Engineering Insights における脆弱性 New CWE-1022
CWE-Other
CVE-2024-39727 2025-01-14 10:18 2024-12-24 Show GitHub Exploit DB Packet Storm
427 5.2 警告
Adjacent 		IBM IBM Cognos Analytics IBM の IBM Cognos Analytics におけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト 		CVE-2024-45082 2025-01-14 10:18 2024-12-17 Show GitHub Exploit DB Packet Storm
428 7.5 重要
Network 		IBM IBM Security Guardium Key Lifecycle Manager IBM の IBM Security Guardium Key Lifecycle Manager における重要な情報の平文での送信に関する脆弱性 New CWE-319
重要な情報の平文での送信 		CVE-2024-49819 2025-01-14 10:18 2024-11-7 Show GitHub Exploit DB Packet Storm
429 3.7 低
Network 		IBM IBM Security Guardium Key Lifecycle Manager IBM の IBM Security Guardium Key Lifecycle Manager における重要な情報の平文での送信に関する脆弱性 New CWE-319
重要な情報の平文での送信 		CVE-2024-49820 2025-01-14 10:10 2024-11-7 Show GitHub Exploit DB Packet Storm
430 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2021-47026 2025-01-14 10:07 2021-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276691 - ipswitch whatsup SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the… NVD-CWE-Other
CVE-2005-1250 2008-09-6 05:48 2005-06-22 Show GitHub Exploit DB Packet Storm
276692 - mysql maxdb Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a … NVD-CWE-Other
CVE-2005-1274 2008-09-6 05:48 2005-04-26 Show GitHub Exploit DB Packet Storm
276693 - ethereal_group ethereal Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. NVD-CWE-Other
CVE-2005-1281 2008-09-6 05:48 2005-04-26 Show GitHub Exploit DB Packet Storm
276694 - inter7 sqwebmail SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML. NVD-CWE-Other
CVE-2005-1308 2008-09-6 05:48 2005-04-15 Show GitHub Exploit DB Packet Storm
276695 - eaden_mckee bblog Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text. NVD-CWE-Other
CVE-2005-1309 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
276696 - eaden_mckee bblog SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NVD-CWE-Other
CVE-2005-1310 2008-09-6 05:48 2005-04-23 Show GitHub Exploit DB Packet Storm
276697 - yappa-ng yappa-ng Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-1311 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
276698 - yappa-ng yappa-ng PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors. NVD-CWE-Other
CVE-2005-1312 2008-09-6 05:48 2005-04-24 Show GitHub Exploit DB Packet Storm
276699 - horde passwd Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1313 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
276700 - horde kronolith Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1314 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm