Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
531 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21251 2025-01-27 16:07 2025-01-14 Show GitHub Exploit DB Packet Storm
532 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21238 2025-01-27 16:01 2025-01-14 Show GitHub Exploit DB Packet Storm
533 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2025 		Windows PrintWorkflowUserSvc の特権昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2025-21234 2025-01-27 15:59 2025-01-14 Show GitHub Exploit DB Packet Storm
534 6.6 警告
Physics 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows 10
Microsoft Windows Server&… 		Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21232 2025-01-27 15:52 2025-01-14 Show GitHub Exploit DB Packet Storm
535 - - HMS Industrial Networks AB Ewon Flexy 202 ファームウェア HMS Networks 製 Ewon Flexy 202 における重要情報の平文送信の脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2025-0432 2025-01-27 15:24 2025-01-24 Show GitHub Exploit DB Packet Storm
536 - - Hitachi Energy RTU500 series CMU Firmware Hitachi Energy 製 RTU500 シリーズにおける規定されたセキュリティチェックの実装が不適切な脆弱性 CWE-358
不適切に実装されたセキュリティチェック 		CVE-2024-2617 2025-01-27 15:08 2025-01-24 Show GitHub Exploit DB Packet Storm
537 5.4 警告 zhwnl ecalendar2 Android 用 ecalendar2 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5862 2025-01-27 15:05 2014-09-3 Show GitHub Exploit DB Packet Storm
538 4.9 警告
Network 		ZyXEL DX3300-T1 ファームウェア
EX5401-B1 ファームウェア
EX3600-T0 ファームウェア
DX4510-B0 ファームウェア
ex5401-b0 ファームウェア
EX5512-T0 ファームウェア
EX3501-T0 ファームウェア
DX3301-T0 ファ… 		複数の ZyXEL 製品における境界外書き込みに関する脆弱性 CWE-119
CWE-787
CVE-2024-38266 2025-01-27 14:50 2024-09-24 Show GitHub Exploit DB Packet Storm
539 9.8 緊急
Network 		デル RecoverPoint for Virtual Machines デルの RecoverPoint for Virtual Machines における過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2024-22425 2025-01-27 14:47 2024-02-16 Show GitHub Exploit DB Packet Storm
540 8.8 重要
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-39990 2025-01-27 14:39 2023-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274421 - deadlock_user_management_system deadlock_user_management_system SQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NVD-CWE-Other
CVE-2006-6922 2011-03-8 11:47 2007-01-13 Show GitHub Exploit DB Packet Storm
274422 - bitweaver bitweaver SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tk parameter. NVD-CWE-Other
CVE-2006-6923 2011-03-8 11:47 2007-01-13 Show GitHub Exploit DB Packet Storm
274423 - owa owa Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message. NVD-CWE-Other
CVE-2006-6940 2011-03-8 11:47 2007-01-17 Show GitHub Exploit DB Packet Storm
274424 - phpmyadmin phpmyadmin phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers. NVD-CWE-Other
CVE-2006-6944 2011-03-8 11:47 2007-01-19 Show GitHub Exploit DB Packet Storm
274425 - myweb4net myweb4net_browser Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on t… NVD-CWE-Other
CVE-2006-6983 2011-03-8 11:47 2007-02-9 Show GitHub Exploit DB Packet Storm
274426 - more_quick_tools greenbrowser Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the a… NVD-CWE-Other
CVE-2006-6984 2011-03-8 11:47 2007-02-9 Show GitHub Exploit DB Packet Storm
274427 - maxthon maxthon Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the … NVD-CWE-Other
CVE-2006-6985 2011-03-8 11:47 2007-02-9 Show GitHub Exploit DB Packet Storm
274428 - phaseout phaseout Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker… NVD-CWE-Other
CVE-2006-6986 2011-03-8 11:47 2007-02-9 Show GitHub Exploit DB Packet Storm
274429 - softinform finebrowser Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on … NVD-CWE-Other
CVE-2006-6987 2011-03-8 11:47 2007-02-9 Show GitHub Exploit DB Packet Storm
274430 - flashpeak slim_browser Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on… NVD-CWE-Other
CVE-2006-6988 2011-03-8 11:47 2007-02-9 Show GitHub Exploit DB Packet Storm