Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
531 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21251 2025-01-27 16:07 2025-01-14 Show GitHub Exploit DB Packet Storm
532 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21238 2025-01-27 16:01 2025-01-14 Show GitHub Exploit DB Packet Storm
533 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2025 		Windows PrintWorkflowUserSvc の特権昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2025-21234 2025-01-27 15:59 2025-01-14 Show GitHub Exploit DB Packet Storm
534 6.6 警告
Physics 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows 10
Microsoft Windows Server&… 		Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21232 2025-01-27 15:52 2025-01-14 Show GitHub Exploit DB Packet Storm
535 - - HMS Industrial Networks AB Ewon Flexy 202 ファームウェア HMS Networks 製 Ewon Flexy 202 における重要情報の平文送信の脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2025-0432 2025-01-27 15:24 2025-01-24 Show GitHub Exploit DB Packet Storm
536 - - Hitachi Energy RTU500 series CMU Firmware Hitachi Energy 製 RTU500 シリーズにおける規定されたセキュリティチェックの実装が不適切な脆弱性 CWE-358
不適切に実装されたセキュリティチェック 		CVE-2024-2617 2025-01-27 15:08 2025-01-24 Show GitHub Exploit DB Packet Storm
537 5.4 警告 zhwnl ecalendar2 Android 用 ecalendar2 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5862 2025-01-27 15:05 2014-09-3 Show GitHub Exploit DB Packet Storm
538 4.9 警告
Network 		ZyXEL DX3300-T1 ファームウェア
EX5401-B1 ファームウェア
EX3600-T0 ファームウェア
DX4510-B0 ファームウェア
ex5401-b0 ファームウェア
EX5512-T0 ファームウェア
EX3501-T0 ファームウェア
DX3301-T0 ファ… 		複数の ZyXEL 製品における境界外書き込みに関する脆弱性 CWE-119
CWE-787
CVE-2024-38266 2025-01-27 14:50 2024-09-24 Show GitHub Exploit DB Packet Storm
539 9.8 緊急
Network 		デル RecoverPoint for Virtual Machines デルの RecoverPoint for Virtual Machines における過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2024-22425 2025-01-27 14:47 2024-02-16 Show GitHub Exploit DB Packet Storm
540 8.8 重要
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-39990 2025-01-27 14:39 2023-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274271 - ibm hardware_management_console Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands." NVD-CWE-noinfo
CVE-2007-6293 2011-03-8 12:02 2007-12-11 Show GitHub Exploit DB Packet Storm
274272 - ibm hardware_management_console Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands." CWE-264
CWE-119
Permissions, Privileges, and Access Controls
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6305 2011-03-8 12:02 2007-12-11 Show GitHub Exploit DB Packet Storm
274273 - mysql mysql_community_server MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6313 2011-03-8 12:02 2008-02-19 Show GitHub Exploit DB Packet Storm
274274 - clam_anti-virus clamav Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors. NVD-CWE-noinfo
CVE-2007-6337 2011-03-8 12:02 2008-01-1 Show GitHub Exploit DB Packet Storm
274275 - hp openview_network_node_manager Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2007-6343 2011-03-8 12:02 2007-12-14 Show GitHub Exploit DB Packet Storm
274276 - aertherwide exiftags exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image. CWE-399
 Resource Management Errors 		CVE-2007-6356 2011-03-8 12:02 2007-12-19 Show GitHub Exploit DB Packet Storm
274277 - nokia n95 Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service (device inoperability) via a SIP INVITE message accompanied by an immediately subsequent SIP CA… CWE-20
 Improper Input Validation  		CVE-2007-6371 2011-03-8 12:02 2007-12-15 Show GitHub Exploit DB Packet Storm
274278 - chandler_project chandler_server The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated users to create arbitrary resources in another user's home c… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6383 2011-03-8 12:02 2007-12-15 Show GitHub Exploit DB Packet Storm
274279 - jboss seam The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order paramet… CWE-20
 Improper Input Validation  		CVE-2007-6433 2011-03-8 12:02 2007-12-19 Show GitHub Exploit DB Packet Storm
274280 - linux linux_kernel Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap_min_addr protection via a crafted executable file that calls the do_brk function. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6434 2011-03-8 12:02 2007-12-19 Show GitHub Exploit DB Packet Storm