Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 20, 2025, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
431	8.1	重要 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Windows Server 2025 Microsoft Windows Server 2022	Windows リモートデスクトップサービスのリモートでコードが実行される脆弱性	CWE-362 CWE-416	CVE-2024-49116	2025-01-17 10:51	2024-12-10	Show	GitHub Exploit DB Packet Storm

432	8.1	重要 Network	マイクロソフト	Microsoft Windows 10 Microsoft Windows Server 2016 Microsoft Windows 11 Microsoft Windows Server 2012 Microsoft Windows Server&…	Microsoft Message Queuing (MSMQ) のリモートでコードが実行される脆弱性	CWE-362 CWE-416	CVE-2024-49118	2025-01-17 10:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

433	8.8	重要 Network	マイクロソフト	Microsoft SQL Server Microsoft ODBC Driver Microsoft Visual Studio	SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性	CWE-190 CWE-noinfo	CVE-2024-28931	2025-01-17 10:42	2024-04-9	Show	GitHub Exploit DB Packet Storm

434	7.8	重要 Local	アドビシステムズ	Adobe Illustrator	アドビの Ipad Os 用 Adobe Illustrator における整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2025-21134	2025-01-17 10:41	2025-01-14	Show	GitHub Exploit DB Packet Storm

435	5.4	警告 Network	Wpmet	ElementsKit Elementor addons	Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1238	2025-01-17 10:29	2024-03-30	Show	GitHub Exploit DB Packet Storm

436	5.4	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1293	2025-01-17 10:29	2024-03-13	Show	GitHub Exploit DB Packet Storm

437	4.3	警告 Network	wpmoose	Yuki	wpmoose の WordPress 用 Yuki における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1388	2025-01-17 10:29	2024-02-28	Show	GitHub Exploit DB Packet Storm

438	5.3	警告 Network	zestard	admin side data storage for contact form 7	zestard の WordPress 用 admin side data storage for contact form 7 における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1778	2025-01-17 10:29	2024-02-23	Show	GitHub Exploit DB Packet Storm

439	6.5	警告 Network	Brizy	brizy	Brizy の WordPress 用 brizy における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1937	2025-01-17 10:29	2024-07-16	Show	GitHub Exploit DB Packet Storm

440	6.1	警告 Network	Dev4Press	GD Rating System	Dev4Press の WordPress 用 GD Rating System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-25093	2025-01-17 10:29	2024-02-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 21, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279221	-	hp	vvos	HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).	NVD-CWE-Other	CVE-1999-0992	2008-09-6 05:18	2000-01-18	Show	GitHub Exploit DB Packet Storm

279222	-	millenux_gmbh university_of_washington redhat	anonftp wu-ftpd linux	wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.	NVD-CWE-Other	CVE-1999-0997	2008-09-6 05:18	1999-12-20	Show	GitHub Exploit DB Packet Storm

279223	-	lotus	domino	SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.	NVD-CWE-Other	CVE-1999-1012	2008-09-6 05:18	1999-05-4	Show	GitHub Exploit DB Packet Storm

279224	-	cisco	resource_manager	Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community st…	NVD-CWE-Other	CVE-1999-1042	2008-09-6 05:18	1999-12-31	Show	GitHub Exploit DB Packet Storm

279225	-	matt_wright	formhandler.cgi	Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to…	NVD-CWE-Other	CVE-1999-1051	2008-09-6 05:18	1999-11-16	Show	GitHub Exploit DB Packet Storm

279226	-	apache matt_wright	http_server matt_wright_guestbook	guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1…	NVD-CWE-Other	CVE-1999-1053	2008-09-6 05:18	1999-09-13	Show	GitHub Exploit DB Packet Storm

279227	-	digital	vms	VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.	NVD-CWE-Other	CVE-1999-1057	2008-09-6 05:18	1990-10-25	Show	GitHub Exploit DB Packet Storm

279228	-	att	svr4	Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-1999-1059	2008-09-6 05:18	1992-02-25	Show	GitHub Exploit DB Packet Storm

279229	-	xylogics	annex	Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.	NVD-CWE-Other	CVE-1999-1070	2008-09-6 05:18	1998-07-25	Show	GitHub Exploit DB Packet Storm

279230	-	ipswitch	ws_ftp_pro	WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.	NVD-CWE-Other	CVE-1999-1078	2008-09-6 05:18	1999-07-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed