Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
51 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 New CWE-476
CWE-noinfo
CVE-2025-21285 2025-01-27 16:14 2025-01-14 Show GitHub Exploit DB Packet Storm
52 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 New CWE-400
CWE-noinfo
CVE-2025-21251 2025-01-27 16:07 2025-01-14 Show GitHub Exploit DB Packet Storm
53 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Window… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2025-21238 2025-01-27 16:01 2025-01-14 Show GitHub Exploit DB Packet Storm
54 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2025 		Windows PrintWorkflowUserSvc の特権昇格の脆弱性 New CWE-20
CWE-noinfo
CVE-2025-21234 2025-01-27 15:59 2025-01-14 Show GitHub Exploit DB Packet Storm
55 6.6 警告
Physics 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows 10
Microsoft Windows Server&… 		Windows デジタル メディアの特権昇格の脆弱性 New CWE-125
CWE-noinfo
CVE-2025-21232 2025-01-27 15:52 2025-01-14 Show GitHub Exploit DB Packet Storm
56 - - HMS Industrial Networks AB Ewon Flexy 202 ファームウェア HMS Networks 製 Ewon Flexy 202 における重要情報の平文送信の脆弱性 New CWE-319
重要な情報の平文での送信 		CVE-2025-0432 2025-01-27 15:24 2025-01-24 Show GitHub Exploit DB Packet Storm
57 - - Hitachi Energy RTU500 series CMU Firmware Hitachi Energy 製 RTU500 シリーズにおける規定されたセキュリティチェックの実装が不適切な脆弱性 New CWE-358
不適切に実装されたセキュリティチェック 		CVE-2024-2617 2025-01-27 15:08 2025-01-24 Show GitHub Exploit DB Packet Storm
58 5.4 警告 zhwnl ecalendar2 Android 用 ecalendar2 アプリケーションにおけるサーバになりすまされる脆弱性 Update CWE-310
暗号の問題 		CVE-2014-5862 2025-01-27 15:05 2014-09-3 Show GitHub Exploit DB Packet Storm
59 4.9 警告
Network 		ZyXEL DX3300-T1 ファームウェア
EX5401-B1 ファームウェア
EX3600-T0 ファームウェア
DX4510-B0 ファームウェア
ex5401-b0 ファームウェア
EX5512-T0 ファームウェア
EX3501-T0 ファームウェア
DX3301-T0 ファ… 		複数の ZyXEL 製品における境界外書き込みに関する脆弱性 New CWE-119
CWE-787
CVE-2024-38266 2025-01-27 14:50 2024-09-24 Show GitHub Exploit DB Packet Storm
60 9.8 緊急
Network 		デル RecoverPoint for Virtual Machines デルの RecoverPoint for Virtual Machines における過度な認証試行の不適切な制限に関する脆弱性 New CWE-307
過度な認証試行の不適切な制限 		CVE-2024-22425 2025-01-27 14:47 2024-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280141 - ibm aix Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors. NVD-CWE-noinfo
CVE-1999-1589 2008-09-5 13:00 1999-12-31 Show GitHub Exploit DB Packet Storm
280142 - coxco_support a-cart
metacart
midicart_asp
midicart_asp_maxi
midicart_asp_plus
salescart-pro
salescart-std 		MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database. CWE-200
Information Exposure 		CVE-2002-1432 2008-09-5 13:00 2003-04-11 Show GitHub Exploit DB Packet Storm
280143 - ikonboard ikonboard Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the UR… CWE-79
Cross-site Scripting 		CVE-2002-2230 2008-09-5 13:00 2002-12-31 Show GitHub Exploit DB Packet Storm
280144 - - - The echo service is running. NVD-CWE-Other
CVE-1999-0635 2007-07-13 13:00 1999-01-1 Show GitHub Exploit DB Packet Storm
280145 - - - This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System … NVD-CWE-Other
CVE-1999-0635 2007-07-13 13:00 1999-01-1 Show GitHub Exploit DB Packet Storm
280146 - - - The Echo Service is an unsecured and obsolete protocol and it should be disabled. Historically it has been used to perform denial of service attacks. NVD-CWE-Other
CVE-1999-0635 2007-07-13 13:00 1999-01-1 Show GitHub Exploit DB Packet Storm
280147 - - - Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an X.400 message containi… NVD-CWE-Other
CVE-2003-0565 2005-10-20 13:00 2003-12-1 Show GitHub Exploit DB Packet Storm
280148 - - - Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun. NVD-CWE-Other
CVE-2000-0889 2005-10-20 13:00 2001-02-12 Show GitHub Exploit DB Packet Storm
280149 - - - Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters. NVD-CWE-Other
CVE-2001-0291 2005-10-20 13:00 2001-05-3 Show GitHub Exploit DB Packet Storm