Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 10:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
551 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-822
CWE-noinfo
CVE-2024-49090 2025-01-15 14:44 2024-12-10 Show GitHub Exploit DB Packet Storm
552 5.5 警告
Local 		オムロン株式会社 NB-Designer オムロン製 NB-Designer における XML 外部エンティティ参照（XXE）の不適切な制限の脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-12298 2025-01-15 14:40 2025-01-14 Show GitHub Exploit DB Packet Storm
553 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows カーネルの特権の昇格の脆弱性 CWE-362
競合状態 		CVE-2024-49084 2025-01-15 14:40 2024-12-10 Show GitHub Exploit DB Packet Storm
554 6.8 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows エクスプローラーの情報漏えいの脆弱性 CWE-22
CWE-noinfo
CVE-2024-49082 2025-01-15 14:36 2024-12-10 Show GitHub Exploit DB Packet Storm
555 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		入力方式エディター (IME) のリモートでコードが実行される脆弱性 CWE-416
CWE-noinfo
CVE-2024-49079 2025-01-15 14:31 2024-12-10 Show GitHub Exploit DB Packet Storm
556 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows リモート デスクトップ サービスのサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2024-49075 2025-01-15 14:22 2024-12-10 Show GitHub Exploit DB Packet Storm
557 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microso… 		Windows 展開サービスの情報漏えいの脆弱性 CWE-41
CWE-noinfo
CVE-2024-30036 2025-01-15 14:22 2024-05-14 Show GitHub Exploit DB Packet Storm
558 4.6 警告
Physics 		Huawei Mate 20 ファームウェア Huawei の Mate 20 ファームウェアにおける脆弱性 CWE-200
CWE-noinfo
CVE-2020-9082 2025-01-15 14:18 2020-02-18 Show GitHub Exploit DB Packet Storm
559 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2987 2025-01-15 14:18 2024-03-27 Show GitHub Exploit DB Packet Storm
560 7.8 重要
Local 		クアルコム qam8650p ファームウェア
qca6698aq ファームウェア
SA8155P ファームウェア
fastconnect 6900 ファームウェア
QCA6595AU ファームウェア
qam8775p ファームウェア
QCA6574A ファームウェア
fastconnec… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-21472 2025-01-15 14:18 2024-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278221 - wolfram_research webmathematica Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter. NVD-CWE-Other
CVE-2002-0926 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278222 - pirch pirch_irc Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message. NVD-CWE-Other
CVE-2002-0928 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278223 - novell netware Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests. NVD-CWE-Other
CVE-2002-0929 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278224 - novell netware Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command. NVD-CWE-Other
CVE-2002-0930 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278225 - luis_bernardo myhelpdesk Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket… NVD-CWE-Other
CVE-2002-0931 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278226 - luis_bernardo myhelpdesk SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op… NVD-CWE-Other
CVE-2002-0932 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278227 - datalex bookit_consumer Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks. NVD-CWE-Other
CVE-2002-0933 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278228 - jon_hedley alienform2 Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m… NVD-CWE-Other
CVE-2002-0934 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278229 - macromedia jrun The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null). NVD-CWE-Other
CVE-2002-0937 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm
278230 - cisco secure_access_control_server Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe. NVD-CWE-Other
CVE-2002-0938 2008-09-6 05:29 2002-10-4 Show GitHub Exploit DB Packet Storm