Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
641 5.3 警告
Network 		GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORG の GLPI におけるセッションの固定化の脆弱性 CWE-287
CWE-384
CWE-79
CVE-2024-50339 2025-01-14 18:48 2024-12-12 Show GitHub Exploit DB Packet Storm
642 7.1 重要
Local 		Huawei HarmonyOS
EMUI 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-16
CWE-noinfo
CVE-2024-54099 2025-01-14 18:48 2024-12-12 Show GitHub Exploit DB Packet Storm
643 5.3 警告
Network 		Huawei NIP6600 ファームウェア
NIP6800 ファームウェア
Secospace USG6500 ファームウェア
NIP6300 ファームウェア
IPS Module ファームウェア
Secospace USG6300 ファームウェア
USG6000V ファー… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2020-1821 2025-01-14 18:48 2024-12-28 Show GitHub Exploit DB Packet Storm
644 5.3 警告
Network 		Huawei NIP6600 ファームウェア
NIP6800 ファームウェア
Secospace USG6500 ファームウェア
NIP6300 ファームウェア
IPS Module ファームウェア
Secospace USG6300 ファームウェア
USG6000V ファー… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2020-1823 2025-01-14 18:48 2024-12-28 Show GitHub Exploit DB Packet Storm
645 7.2 重要
Network 		Huawei Mate 30 ファームウェア Huawei の Mate 30 ファームウェアにおける境界外読み取りに関する脆弱性 CWE-125
CWE-125
CWE-787
CVE-2020-9211 2025-01-14 18:48 2020-02-18 Show GitHub Exploit DB Packet Storm
646 9.8 緊急
Network 		- CSZ CMS における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-25414 2025-01-14 18:48 2024-02-16 Show GitHub Exploit DB Packet Storm
647 9.8 緊急
Network 		マイクロソフト Microsoft Update Catalog Microsoft Update カタログの特権昇格の脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-49147 2025-01-14 18:08 2024-12-12 Show GitHub Exploit DB Packet Storm
648 9.8 緊急
Network 		マイクロソフト Microsoft Configuration Manager Microsoft Configuration Manager のリモートでコードが実行される脆弱性 CWE-89
CWE-noinfo
CVE-2024-43468 2025-01-14 17:52 2024-10-8 Show GitHub Exploit DB Packet Storm
649 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-56715 2025-01-14 17:47 2024-12-15 Show GitHub Exploit DB Packet Storm
650 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53227 2025-01-14 17:44 2024-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276731 - microsoft windows_2000
windows_2003_server
windows_xp 		CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table … NVD-CWE-Other
CVE-2005-3177 2008-09-6 05:53 2005-10-6 Show GitHub Exploit DB Packet Storm
276732 - - - Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors. NVD-CWE-Other
CVE-2005-3238 2008-09-6 05:53 2005-10-15 Show GitHub Exploit DB Packet Storm
276733 - gallery_project gallery Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter. NVD-CWE-Other
CVE-2005-3251 2008-09-6 05:53 2005-10-18 Show GitHub Exploit DB Packet Storm
276734 - nathan_neulinger cgiwrap The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute cod… NVD-CWE-Other
CVE-2005-3254 2008-09-6 05:53 2005-10-19 Show GitHub Exploit DB Packet Storm
276735 - - - The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information… NVD-CWE-Other
CVE-2005-3255 2008-09-6 05:53 2005-10-19 Show GitHub Exploit DB Packet Storm
276736 - raphael_bossek yiff_server yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files. NVD-CWE-Other
CVE-2005-3268 2008-09-6 05:53 2005-10-21 Show GitHub Exploit DB Packet Storm
276737 - symantec norton_antivirus Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file. NVD-CWE-Other
CVE-2005-3270 2008-09-6 05:53 2005-10-21 Show GitHub Exploit DB Packet Storm
276738 - hp hp-ux The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled w… NVD-CWE-Other
CVE-2005-3277 2008-09-6 05:53 2005-10-22 Show GitHub Exploit DB Packet Storm
276739 - jan_kybic bitmap_viewer Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long… NVD-CWE-Other
CVE-2005-3279 2008-09-6 05:53 2005-10-23 Show GitHub Exploit DB Packet Storm
276740 - nukefixes nukefixes Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter. NVD-CWE-Other
CVE-2005-3281 2008-09-6 05:53 2005-10-23 Show GitHub Exploit DB Packet Storm