Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
511 7.5 重要
Network 		paddlepaddle paddlepaddle paddlepaddle における脆弱性 CWE-73
CWE-Other
CVE-2024-1603 2025-01-27 16:22 2024-03-23 Show GitHub Exploit DB Packet Storm
512 6 警告
Local 		Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2024-2552 2025-01-27 16:22 2024-11-14 Show GitHub Exploit DB Packet Storm
513 7.5 重要
Network 		Open5GS Open5GS Open5GS における到達可能なアサーションに関する脆弱性 CWE-617
CWE-617
CVE-2024-24427 2025-01-27 16:22 2024-01-25 Show GitHub Exploit DB Packet Storm
514 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows インストーラーの特権の昇格の脆弱性 CWE-269
CWE-noinfo
CVE-2025-21287 2025-01-27 16:22 2025-01-14 Show GitHub Exploit DB Packet Storm
515 7.8 重要
Local 		openatom openharmony openatom の openharmony における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-28951 2025-01-27 16:22 2024-04-2 Show GitHub Exploit DB Packet Storm
516 9.8 緊急
Network 		Sapplica Sentrifugo Sapplica の Sentrifugo における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-29871 2025-01-27 16:22 2024-03-21 Show GitHub Exploit DB Packet Storm
517 6.1 警告
Network 		Themify themify builder Themify の WordPress 用 Themify Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-13319 2025-01-27 16:18 2025-01-22 Show GitHub Exploit DB Packet Storm
518 5.4 警告
Network 		aipower aipower WordPress 用 aipower におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-13360 2025-01-27 16:17 2025-01-22 Show GitHub Exploit DB Packet Storm
519 7.5 重要
Network 		GamiPress GamiPress - Vimeo integration GamiPress の WordPress 用 GamiPress - Vimeo integration における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-13496 2025-01-27 16:17 2025-01-22 Show GitHub Exploit DB Packet Storm
520 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-476
CWE-noinfo
CVE-2025-21285 2025-01-27 16:14 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280271 - youngzsoft cmailserver Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument. NVD-CWE-Other
CVE-2002-0799 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280272 - working_resources_inc. badblue BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. NVD-CWE-Other
CVE-2002-0800 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280273 - macromedia jrun Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a … NVD-CWE-Other
CVE-2002-0801 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280274 - mozilla bugzilla Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reve… NVD-CWE-Other
CVE-2002-0804 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280275 - mozilla bugzilla Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local … NVD-CWE-Other
CVE-2002-0805 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
280276 - yahoo messenger Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI. NVD-CWE-Other
CVE-2002-0032 2008-09-6 05:27 2002-07-26 Show GitHub Exploit DB Packet Storm
280277 - ibm lotus_domino_server Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses th… NVD-CWE-Other
CVE-2002-0037 2008-09-6 05:27 2002-04-22 Show GitHub Exploit DB Packet Storm
280278 - sgi irix rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths. NVD-CWE-Other
CVE-2002-0039 2008-09-6 05:27 2002-03-28 Show GitHub Exploit DB Packet Storm
280279 - sgi irix Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privile… NVD-CWE-Other
CVE-2002-0040 2008-09-6 05:27 2002-03-28 Show GitHub Exploit DB Packet Storm
280280 - sgi irix Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump. NVD-CWE-Other
CVE-2002-0041 2008-09-6 05:27 2002-04-22 Show GitHub Exploit DB Packet Storm