Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
461 4.3 警告
Network
wobbie mollie forms wobbie の WordPress 用 mollie forms における脆弱性 New CWE-noinfo
情報不足
CVE-2024-1645 2025-01-22 10:35 2024-03-11 Show GitHub Exploit DB Packet Storm
462 5.4 警告
Network
POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3197 2025-01-22 10:35 2024-05-2 Show GitHub Exploit DB Packet Storm
463 8.8 重要
Network
XWiki xwiki XWiki の xwiki における認証の欠如に関する脆弱性 New CWE-862
CWE-862
CVE-2024-31983 2025-01-22 10:35 2024-04-10 Show GitHub Exploit DB Packet Storm
464 6.1 警告
Network
PrestaShop PrestaShop PrestaShop におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-34716 2025-01-22 10:35 2024-05-14 Show GitHub Exploit DB Packet Storm
465 9.8 緊急
Network
マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager におけるコマンドインジェクションの脆弱性 New CWE-434
CWE-502
CWE-502
CWE-77
CWE-77
CVE-2024-3483 2025-01-22 10:35 2024-05-15 Show GitHub Exploit DB Packet Storm
466 9.8 緊急
Network
マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager における危険なタイプのファイルの無制限アップロードに関する脆弱性 New CWE-20
CWE-434
CVE-2024-3488 2025-01-22 10:35 2024-05-15 Show GitHub Exploit DB Packet Storm
467 5.4 警告
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3695 2025-01-22 10:35 2024-04-12 Show GitHub Exploit DB Packet Storm
468 7.3 重要
Local
マイクロソフト Microsoft Visual Studio Visual Studio の特権の昇格の脆弱性 New CWE-284
CWE-noinfo
CVE-2025-21405 2025-01-22 10:09 2025-01-14 Show GitHub Exploit DB Packet Storm
469 7.8 重要
Local
マイクロソフト Microsoft 365 Apps
Microsoft Office
Microsoft Access
Microsoft Access のリモート コードが実行される脆弱性 New CWE-416
CWE-noinfo
CVE-2025-21366 2025-01-22 10:06 2025-01-14 Show GitHub Exploit DB Packet Storm
470 8.4 重要
Local
マイクロソフト Microsoft Office
Microsoft Office Online Server
Microsoft Excel
Microsoft 365 Apps
Microsoft Excel のリモートでコードが実行される脆弱性 New CWE-416
CWE-noinfo
CVE-2025-21362 2025-01-22 09:48 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275791 - palm palm_desktop Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information. NVD-CWE-Other
CVE-2002-0120 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275792 - php php PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections. NVD-CWE-Other
CVE-2002-0121 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275793 - siemens 3568i_wap Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters. NVD-CWE-Other
CVE-2002-0122 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275794 - mdg_computer_services web_server_4d_ecommerce MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP re… NVD-CWE-Other
CVE-2002-0123 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275795 - mdg_computer_services web_server_4d_ecommerce MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request. NVD-CWE-Other
CVE-2002-0124 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275796 - clanlib clanlib Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and … NVD-CWE-Other
CVE-2002-0125 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275797 - selom_ofori blackmoon_ftp_server Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD. NVD-CWE-Other
CVE-2002-0126 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275798 - chinput chinput Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable. NVD-CWE-Other
CVE-2002-0132 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275799 - netopia timbuktu_pro Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420). NVD-CWE-Other
CVE-2002-0135 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm
275800 - pi-soft spoonftp Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. NVD-CWE-Other
CVE-2002-0139 2008-09-11 09:00 2002-03-25 Show GitHub Exploit DB Packet Storm