Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
491 5.9 警告
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows Kerberos の情報漏えいの脆弱性 CWE-200
CWE-noinfo
CVE-2025-21242 2025-01-27 17:18 2025-01-14 Show GitHub Exploit DB Packet Storm
492 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&… 		Windows Geolocation Service の情報漏えいの脆弱性 CWE-284
CWE-noinfo
CVE-2025-21301 2025-01-27 17:18 2025-01-14 Show GitHub Exploit DB Packet Storm
493 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21240 2025-01-27 17:16 2025-01-14 Show GitHub Exploit DB Packet Storm
494 6.5 警告
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows COM サーバーの情報漏えいの脆弱性 CWE-908
CWE-noinfo
CVE-2025-21288 2025-01-27 17:14 2025-01-14 Show GitHub Exploit DB Packet Storm
495 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&… 		Windows Kerberos のセキュリティ機能のバイパスの脆弱性 CWE-922
CWE-noinfo
CVE-2025-21299 2025-01-27 17:06 2025-01-14 Show GitHub Exploit DB Packet Storm
496 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21237 2025-01-27 17:04 2025-01-14 Show GitHub Exploit DB Packet Storm
497 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft ダイジェスト認証のリモートでコードが実行される脆弱性 CWE-591
CWE-noinfo
CVE-2025-21294 2025-01-27 17:00 2025-01-14 Show GitHub Exploit DB Packet Storm
498 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows Reliable Multicast Transport Driver (RMCAST) のリモートでコードが実行される脆弱性 CWE-416
CWE-noinfo
CVE-2025-21307 2025-01-27 16:53 2025-01-14 Show GitHub Exploit DB Packet Storm
499 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21303 2025-01-27 16:48 2025-01-14 Show GitHub Exploit DB Packet Storm
500 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21252 2025-01-27 16:46 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275001 - adobe acrobat
acrobat_reader 		Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remot… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-0512 2010-05-4 14:40 2009-06-12 Show GitHub Exploit DB Packet Storm
275002 - helpcenterlive hcl Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .… CWE-22
Path Traversal 		CVE-2010-1652 2010-05-4 00:30 2010-05-3 Show GitHub Exploit DB Packet Storm
275003 - htmlcoderhelper com_graphics Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (d… CWE-22
Path Traversal 		CVE-2010-1653 2010-05-3 22:51 2010-05-3 Show GitHub Exploit DB Packet Storm
275004 - instantrankingseo infocus_real_estate Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the (1) username (aka login) a… CWE-89
SQL Injection 		CVE-2010-1654 2010-05-3 22:51 2010-05-3 Show GitHub Exploit DB Packet Storm
275005 - zimbllc com_zimbcomment Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a ..… CWE-22
Path Traversal 		CVE-2010-1602 2010-04-30 13:00 2010-04-30 Show GitHub Exploit DB Packet Storm
275006 - zimbllc com_zimbcore Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly… CWE-22
Path Traversal 		CVE-2010-1603 2010-04-30 13:00 2010-04-30 Show GitHub Exploit DB Packet Storm
275007 - vpasp vp-asp_shopping_cart Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2010-1590 2010-04-29 13:00 2010-04-29 Show GitHub Exploit DB Packet Storm
275008 - sisoftware sandra sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service (system crash) via unspec… CWE-20
 Improper Input Validation  		CVE-2010-1592 2010-04-29 13:00 2010-04-29 Show GitHub Exploit DB Packet Storm
275009 - vmware server Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON error messages. CWE-79
Cross-site Scripting 		CVE-2010-1193 2010-04-28 14:46 2010-04-2 Show GitHub Exploit DB Packet Storm
275010 - moinmo moinmoin MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1238 2010-04-28 14:46 2010-04-6 Show GitHub Exploit DB Packet Storm