Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
51	7.1	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2021-47039	2025-01-10 16:15	2021-04-21	Show	GitHub Exploit DB Packet Storm

52	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2021-47035	2025-01-10 16:12	2021-04-7	Show	GitHub Exploit DB Packet Storm

53	6.5	警告 Network	sixlabors	imagesharp	sixlabors の imagesharp における保存または転送前の重要な情報の削除に関する脆弱性 New	CWE-212 CWE-226	CVE-2024-32036	2025-01-10 15:57	2024-04-15	Show	GitHub Exploit DB Packet Storm

54	7.5	重要 Network	AlayaCare	Procura	AlayaCare の Procura における認証に関する脆弱性 New	CWE-1394 CWE-287	CVE-2023-6451	2025-01-10 15:37	2023-11-30	Show	GitHub Exploit DB Packet Storm

55	7	重要 Local	クアルコム	APQ8017 ファームウェア AR6003 ファームウェア Snapdragon 630 Mobile ファームウェア 9206 lte modem ファームウェア Snapdragon 636 Mobile ファームウェア	複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2017-18153	2025-01-10 15:31	2024-11-26	Show	GitHub Exploit DB Packet Storm

56	7.6	重要 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 Sales のなりすましの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-49053	2025-01-10 15:20	2024-11-26	Show	GitHub Exploit DB Packet Storm

57	4.1	警告 Network	マイクロソフト	Microsoft Dynamics 365	Dynamics 365 Customer Insights のなりすましの脆弱性 New	CWE-79 CWE-79	CVE-2024-30047	2025-01-10 15:19	2024-05-14	Show	GitHub Exploit DB Packet Storm

58	8.8	重要 Network	Atakan Au	1 click disable all	Atakan Au の WordPress 用 1 click disable all におけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 同一生成元ポリシー違反	CVE-2024-21749	2025-01-10 15:18	2024-02-28	Show	GitHub Exploit DB Packet Storm

59	5.3	警告 Network	Themeperch	Build & Control Block Patterns - Boost up Gutenberg Editor	Themeperch の WordPress 用 Build & Control Block Patterns - Boost up Gutenberg Editor における認証の欠如に関する脆弱性 New	CWE-862 認証の欠如	CVE-2024-1095	2025-01-10 15:14	2024-03-5	Show	GitHub Exploit DB Packet Storm

60	8.1	重要 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Windows Server 2022 Microsoft Windows Server 2016	Windows リモートデスクトップサービスのリモートでコードが実行される脆弱性 New	CWE-362 CWE-416 CWE-591	CVE-2024-49108	2025-01-10 14:55	2024-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276691	-	coolforum	coolforum	Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.	NVD-CWE-Other	CVE-2002-1515	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276692	-	sgi	freeware irix	fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.	NVD-CWE-Other	CVE-2002-1517	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276693	-	sgi	irix	mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.	NVD-CWE-Other	CVE-2002-1518	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276694	-	rapidstream watchguard	rapidstream firebox	Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arb…	NVD-CWE-Other	CVE-2002-1519	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276695	-	rapidstream watchguard	rapidstream firebox	The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows …	NVD-CWE-Other	CVE-2002-1520	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276696	-	mdg_computer_services	web_server_4d	Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.	NVD-CWE-Other	CVE-2002-1521	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276697	-	cooolsoft	powerftp	Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.	NVD-CWE-Other	CVE-2002-1522	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276698	-	daniel_arenz	mini_server	Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences.	NVD-CWE-Other	CVE-2002-1523	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276699	-	nullsoft	winamp	Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.	NVD-CWE-Other	CVE-2002-1524	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

276700	-	astaware sun	searchdisc sunone_starter_kit	Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or …	NVD-CWE-Other	CVE-2002-1525	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed