Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
571 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21305 2025-01-27 12:32 2025-01-14 Show GitHub Exploit DB Packet Storm
572 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-416
CWE-noinfo
CVE-2025-21297 2025-01-27 12:30 2025-01-14 Show GitHub Exploit DB Packet Storm
573 6.1 警告
Network 		Rodrigue EXIF Viewer Classic EXIF Viewer Classicにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-23362 2025-01-27 12:29 2025-01-27 Show GitHub Exploit DB Packet Storm
574 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21290 2025-01-27 12:28 2025-01-14 Show GitHub Exploit DB Packet Storm
575 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21286 2025-01-27 12:27 2025-01-14 Show GitHub Exploit DB Packet Storm
576 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21250 2025-01-27 12:25 2025-01-14 Show GitHub Exploit DB Packet Storm
577 6.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21249 2025-01-27 12:23 2025-01-14 Show GitHub Exploit DB Packet Storm
578 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-125
CWE-noinfo
CVE-2025-21246 2025-01-27 12:22 2025-01-14 Show GitHub Exploit DB Packet Storm
579 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-190
CWE-noinfo
CVE-2025-21244 2025-01-27 12:20 2025-01-14 Show GitHub Exploit DB Packet Storm
580 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2025
Microso… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21236 2025-01-27 12:18 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274221 - cacti cacti SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a va… CWE-89
SQL Injection 		CVE-2010-2092 2012-02-16 13:04 2010-05-28 Show GitHub Exploit DB Packet Storm
274222 - cacti cacti SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter. CWE-89
SQL Injection 		CVE-2010-1431 2012-02-16 13:02 2010-05-5 Show GitHub Exploit DB Packet Storm
274223 - hp power_manager Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-3999 2012-02-14 12:49 2010-01-21 Show GitHub Exploit DB Packet Storm
274224 - cafuego simple_document_management_system Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list… CWE-89
SQL Injection 		CVE-2005-3877 2012-02-7 14:00 2005-11-29 Show GitHub Exploit DB Packet Storm
274225 - sitracker support_incident_tracker Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3.30 have unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2007-5635 2012-02-2 14:00 2007-10-24 Show GitHub Exploit DB Packet Storm
274226 - kde kdelibs KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle atta… CWE-310
Cryptographic Issues 		CVE-2009-2702 2012-01-19 12:40 2009-09-9 Show GitHub Exploit DB Packet Storm
274227 - semanticscuttle semanticscuttle Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1) hijack the authentication of administrators via unknown vectors or (2) hijack t… CWE-352
 Origin Validation Error 		CVE-2009-0708 2012-01-5 14:00 2009-02-24 Show GitHub Exploit DB Packet Storm
274228 - xzeroscripts xzero_community_classifieds Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file… CWE-79
Cross-site Scripting 		CVE-2009-2914 2011-12-29 14:00 2009-08-21 Show GitHub Exploit DB Packet Storm
274229 - asus asus_wl-330ge Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this discl… NVD-CWE-noinfo
CVE-2009-3091 2011-12-21 14:00 2009-09-9 Show GitHub Exploit DB Packet Storm
274230 - sun
x.org 		opensolaris
solaris
x11 		xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users… NVD-CWE-Other
CVE-2009-3100 2011-12-21 14:00 2009-09-9 Show GitHub Exploit DB Packet Storm