Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 20, 2025, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
431	8.1	重要 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Windows Server 2025 Microsoft Windows Server 2022	Windows リモートデスクトップサービスのリモートでコードが実行される脆弱性	CWE-362 CWE-416	CVE-2024-49116	2025-01-17 10:51	2024-12-10	Show	GitHub Exploit DB Packet Storm

432	8.1	重要 Network	マイクロソフト	Microsoft Windows 10 Microsoft Windows Server 2016 Microsoft Windows 11 Microsoft Windows Server 2012 Microsoft Windows Server&…	Microsoft Message Queuing (MSMQ) のリモートでコードが実行される脆弱性	CWE-362 CWE-416	CVE-2024-49118	2025-01-17 10:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

433	8.8	重要 Network	マイクロソフト	Microsoft SQL Server Microsoft ODBC Driver Microsoft Visual Studio	SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性	CWE-190 CWE-noinfo	CVE-2024-28931	2025-01-17 10:42	2024-04-9	Show	GitHub Exploit DB Packet Storm

434	7.8	重要 Local	アドビシステムズ	Adobe Illustrator	アドビの Ipad Os 用 Adobe Illustrator における整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2025-21134	2025-01-17 10:41	2025-01-14	Show	GitHub Exploit DB Packet Storm

435	5.4	警告 Network	Wpmet	ElementsKit Elementor addons	Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1238	2025-01-17 10:29	2024-03-30	Show	GitHub Exploit DB Packet Storm

436	5.4	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1293	2025-01-17 10:29	2024-03-13	Show	GitHub Exploit DB Packet Storm

437	4.3	警告 Network	wpmoose	Yuki	wpmoose の WordPress 用 Yuki における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1388	2025-01-17 10:29	2024-02-28	Show	GitHub Exploit DB Packet Storm

438	5.3	警告 Network	zestard	admin side data storage for contact form 7	zestard の WordPress 用 admin side data storage for contact form 7 における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1778	2025-01-17 10:29	2024-02-23	Show	GitHub Exploit DB Packet Storm

439	6.5	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1937	2025-01-17 10:29	2024-07-16	Show	GitHub Exploit DB Packet Storm

440	6.1	警告 Network	Dev4Press	GD Rating System	Dev4Press の WordPress 用 GD Rating System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-25093	2025-01-17 10:29	2024-02-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275301	-	mpg123	mpg123	mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.	NVD-CWE-Other	CVE-2003-0577	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

275302	-	cvsup sup	cvsup-mirror sup	sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.	NVD-CWE-Other	CVE-2003-0606	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

275303	-	mcafee	epolicy_orchestrator	Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.	NVD-CWE-Other	CVE-2003-0610	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

275304	-	zblast	zblast	Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file.	NVD-CWE-Other	CVE-2003-0613	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

275305	-	nokia	sgsn_dx200	SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node (SGSN) allows remote attackers to read SNMP options via arbitrary community strings.	NVD-CWE-Other	CVE-2003-0137	2008-09-11 04:18	2003-03-18	Show	GitHub Exploit DB Packet Storm

275306	-	mcafee	epolicy_orchestrator	The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username a…	NVD-CWE-Other	CVE-2003-0148	2008-09-11 04:18	2003-08-27	Show	GitHub Exploit DB Packet Storm

275307	-	mcafee	epolicy_orchestrator	Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.	NVD-CWE-Other	CVE-2003-0149	2008-09-11 04:18	2003-08-27	Show	GitHub Exploit DB Packet Storm

275308	-	apple	mac_os_x mac_os_x_server	DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a d…	NVD-CWE-Other	CVE-2003-0171	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

275309	-	xfsdump sgi	xfsdump irix	xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.	NVD-CWE-Other	CVE-2003-0173	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

275310	-	apple	mac_os_x mac_os_x_server	Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.	NVD-CWE-Other	CVE-2003-0198	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed