Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 6:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
491 8.4 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2025
Windows App
Microsoft Windows Server 2012
M… 		リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 New CWE-284
CWE-noinfo
CVE-2024-49105 2025-01-14 15:34 2024-12-10 Show GitHub Exploit DB Packet Storm
492 5.4 警告
Network 		マイクロソフト Microsoft Bing Search Microsoft Bing Search のなりすましの脆弱性 New CWE-693
CWE-noinfo
CVE-2024-30041 2025-01-14 15:20 2024-05-14 Show GitHub Exploit DB Packet Storm
493 5.4 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性 New CWE-359
CWE-noinfo
CVE-2024-30056 2025-01-14 15:20 2024-05-16 Show GitHub Exploit DB Packet Storm
494 4.3 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) のなりすましの脆弱性 New CWE-449
CWE-noinfo
CVE-2024-49041 2025-01-14 15:20 2024-12-5 Show GitHub Exploit DB Packet Storm
495 7 重要
Local 		マイクロソフト Microsoft Office
Microsoft 365 Apps 		Microsoft Office の特権の昇格の脆弱性 New CWE-362
CWE-59
CVE-2024-49059 2025-01-14 15:20 2024-12-10 Show GitHub Exploit DB Packet Storm
496 6.5 警告
Network 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server 		Microsoft SharePoint の情報漏えいの脆弱性 New CWE-611
CWE-noinfo
CVE-2024-49064 2025-01-14 15:20 2024-12-10 Show GitHub Exploit DB Packet Storm
497 4.3 警告
Physics 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&… 		Windows ワイヤレス ワイド エリア ネットワーク サービス (WwanSvc) の情報漏えいの脆弱性 New CWE-125
CWE-191
CWE-noinfo
CVE-2024-49103 2025-01-14 15:19 2024-12-10 Show GitHub Exploit DB Packet Storm
498 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server 2012
Microsoft Window… 		Windows タスク スケジューラの特権の昇格の脆弱性 New CWE-122
CWE-noinfo
CVE-2024-49072 2025-01-14 15:15 2024-12-10 Show GitHub Exploit DB Packet Storm
499 8.2 重要
Network 		マイクロソフト Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server 		Microsoft SharePoint の特権の昇格の脆弱性 New CWE-284
CWE-noinfo
CVE-2024-49068 2025-01-14 15:13 2024-12-10 Show GitHub Exploit DB Packet Storm
500 7.8 重要
Local 		マイクロソフト Microsoft Office Microsoft Office の特権の昇格の脆弱性 New CWE-284
CWE-noinfo
CVE-2024-43600 2025-01-14 15:10 2024-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276741 - notify_technology notifylink SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL. NVD-CWE-Other
CVE-2005-0810 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276742 - notify_technology notifylink The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a di… NVD-CWE-Other
CVE-2005-0811 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276743 - notify_technology notifylink The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information. NVD-CWE-Other
CVE-2005-0812 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276744 - initial_redirect initial_redirect_squid_proxy_plug-in Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors. NVD-CWE-Other
CVE-2005-0813 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276745 - novell netware The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. NVD-CWE-Other
CVE-2005-0819 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276746 - - - Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database… NVD-CWE-Other
CVE-2005-0820 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276747 - citrix metaframe_password_manager Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is… NVD-CWE-Other
CVE-2005-0822 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276748 - lgames ltris Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. NVD-CWE-Other
CVE-2005-0825 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276749 - xzabite dyndnsupdate Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code … NVD-CWE-Other
CVE-2005-0830 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
276750 - php-post php-post_web_forum PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters. NVD-CWE-Other
CVE-2005-0831 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm