Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 4:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
481 7.8 重要
Local 		Google Android Google の Android における脆弱性 New CWE-noinfo
情報不足 		CVE-2023-35685 2025-01-14 11:48 2023-06-15 Show GitHub Exploit DB Packet Storm
482 7.8 重要
Local 		クアルコム qam8775p ファームウェア
QCA6574 ファームウェア
AR8035 ファームウェア
qam8255p ファームウェア
QAM8295P ファームウェア
fastconnect 6900 ファームウェア
QCA6391 ファームウェア
flight rb5… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 New CWE-416
CWE-416
CVE-2023-43547 2025-01-14 11:48 2023-09-19 Show GitHub Exploit DB Packet Storm
483 9.8 緊急
Network 		クアルコム immersive home 316 ファームウェア
AR8035 ファームウェア
fastconnect 6900 ファームウェア
IPQ6028 ファームウェア
IPQ5028 ファームウェア
immersive home 216 ファームウェア
… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 New CWE-416
CWE-416
CVE-2023-43552 2025-01-14 11:48 2023-09-19 Show GitHub Exploit DB Packet Storm
484 6.1 警告
Network 		Metagauss Inc. eventprime Metagauss Inc. の WordPress 用 eventprime におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-12024 2025-01-14 11:48 2024-12-17 Show GitHub Exploit DB Packet Storm
485 4.8 警告
Network 		zerowdd studentmanager zerowdd の studentmanager におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CWE-94
CVE-2024-13142 2025-01-14 11:48 2025-01-5 Show GitHub Exploit DB Packet Storm
486 8.1 重要
Network 		lunary lunary lunary におけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-250
CWE-639
CVE-2024-1626 2025-01-14 11:48 2024-04-16 Show GitHub Exploit DB Packet Storm
487 5.3 警告
Network 		lunary lunary lunary における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2024-1666 2025-01-14 11:48 2024-04-16 Show GitHub Exploit DB Packet Storm
488 9.1 緊急
Network 		lunary lunary lunary における不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2024-1740 2025-01-14 11:48 2024-04-10 Show GitHub Exploit DB Packet Storm
489 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-56767 2025-01-14 11:36 2024-12-2 Show GitHub Exploit DB Packet Storm
490 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2024-53151 2025-01-14 10:33 2024-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276331 - kaf_oseo quick_and_dirty_phpsource_printer Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, whi… NVD-CWE-Other
CVE-2005-2169 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
276332 - mozilla bugzilla The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to… NVD-CWE-Other
CVE-2005-2173 2008-09-6 05:51 2005-07-8 Show GitHub Exploit DB Packet Storm
276333 - mozilla bugzilla Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access info… NVD-CWE-Other
CVE-2005-2174 2008-09-6 05:51 2005-07-8 Show GitHub Exploit DB Packet Storm
276334 - ibm lotus_notes The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based att… NVD-CWE-Other
CVE-2005-2175 2008-09-6 05:51 2005-07-9 Show GitHub Exploit DB Packet Storm
276335 - apple airport_card The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network. NVD-CWE-Other
CVE-2005-2196 2008-09-6 05:51 2005-07-19 Show GitHub Exploit DB Packet Storm
276336 - spid spid PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter. NVD-CWE-Other
CVE-2005-2198 2008-09-6 05:51 2005-07-11 Show GitHub Exploit DB Packet Storm
276337 - skrypty ppa_gallery PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable. NVD-CWE-Other
CVE-2005-2199 2008-09-6 05:51 2005-07-11 Show GitHub Exploit DB Packet Storm
276338 - xerox workcentre_2128
workcentre_2636
workcentre_3545 		Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication. NVD-CWE-Other
CVE-2005-2200 2008-09-6 05:51 2005-07-11 Show GitHub Exploit DB Packet Storm
276339 - xerox workcentre_2128
workcentre_2636
workcentre_3545 		Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or acc… NVD-CWE-Other
CVE-2005-2201 2008-09-6 05:51 2005-07-11 Show GitHub Exploit DB Packet Storm
276340 - xerox workcentre_2128
workcentre_2636
workcentre_3545 		Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to injec… NVD-CWE-Other
CVE-2005-2202 2008-09-6 05:51 2005-07-11 Show GitHub Exploit DB Packet Storm