Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 12:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
581 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows SCSI クラス システム ファイルの特権の昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2024-29994 2025-01-21 10:56 2024-05-14 Show GitHub Exploit DB Packet Storm
582 9.8 緊急
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system における常に不適切な制御フローの実装に関する脆弱性 CWE-670
CWE-698
CVE-2024-3376 2025-01-21 10:53 2024-04-6 Show GitHub Exploit DB Packet Storm
583 8.8 重要
Network
マイクロソフト Microsoft SQL Server
Microsoft ODBC Driver
SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-28943 2025-01-21 10:53 2024-04-9 Show GitHub Exploit DB Packet Storm
584 8.8 重要
Network
マイクロソフト Microsoft SQL Server SQL Server Native Client OLE DB プロバイダーのリモート コード実行に対する脆弱性 CWE-122
CWE-noinfo
CVE-2024-21333 2025-01-21 10:48 2024-07-9 Show GitHub Exploit DB Packet Storm
585 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2023-52777 2025-01-21 10:46 2023-10-25 Show GitHub Exploit DB Packet Storm
586 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2021-47445 2025-01-21 10:44 2021-10-11 Show GitHub Exploit DB Packet Storm
587 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック
CVE-2024-57807 2025-01-21 10:40 2024-11-20 Show GitHub Exploit DB Packet Storm
588 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2024-56601 2025-01-21 10:38 2024-10-15 Show GitHub Exploit DB Packet Storm
589 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2024-56692 2025-01-21 10:37 2024-11-1 Show GitHub Exploit DB Packet Storm
590 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算
CVE-2024-56369 2025-01-21 10:36 2024-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275161 - sun opensolaris
solaris
Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditc… NVD-CWE-noinfo
CVE-2009-2430 2009-07-23 04:11 2009-07-11 Show GitHub Exploit DB Packet Storm
275162 - verlihub-project verlihub_control_panel Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to… CWE-79
Cross-site Scripting
CVE-2009-2569 2009-07-23 02:30 2009-07-23 Show GitHub Exploit DB Packet Storm
275163 - 3ds
ibm
enovia_smarteam
catia
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object… CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-0809 2009-07-22 13:00 2009-03-5 Show GitHub Exploit DB Packet Storm
275164 - 3ds
ibm
enovia_smarteam
catia
Per http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332 "Scenario: 1. Create a document class and give permissions to joe only. 2. When someone else but joe logs onto Web editor, and does … CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-0809 2009-07-22 13:00 2009-03-5 Show GitHub Exploit DB Packet Storm
275165 - gnu mailman Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries. NVD-CWE-Other
CVE-2002-0388 2009-07-22 06:00 2002-06-18 Show GitHub Exploit DB Packet Storm
275166 - bistudio arma
arma_2
Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibl… CWE-134
Use of Externally-Controlled Format String
CVE-2009-2548 2009-07-21 13:00 2009-07-21 Show GitHub Exploit DB Packet Storm
275167 - bistudio arma
arma_2
Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value i… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2009-2549 2009-07-21 13:00 2009-07-21 Show GitHub Exploit DB Packet Storm
275168 - iglues bulmages-servers bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) cr… CWE-59
Link Following
CVE-2008-4943 2009-07-21 13:00 2008-11-6 Show GitHub Exploit DB Packet Storm
275169 - atmail \@tmail Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: … CWE-79
Cross-site Scripting
CVE-2009-2455 2009-07-20 13:00 2009-07-14 Show GitHub Exploit DB Packet Storm
275170 - convirture convirt convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file, related to the (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh… CWE-59
Link Following
CVE-2008-4946 2009-07-20 13:00 2008-11-6 Show GitHub Exploit DB Packet Storm