Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
671 5.3 警告
Network 		zestard admin side data storage for contact form 7 zestard の WordPress 用 admin side data storage for contact form 7 における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1779 2025-01-17 11:58 2024-02-23 Show GitHub Exploit DB Packet Storm
672 8.8 重要
Network 		Progress Software Corporation telerik report server Progress Software Corporation の telerik report server における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-1800 2025-01-17 11:58 2024-03-20 Show GitHub Exploit DB Packet Storm
673 7.5 重要
Network 		Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-13180 2025-01-17 11:58 2025-01-14 Show GitHub Exploit DB Packet Storm
674 - - Belledonne Communications Linphone-Desktop Belledonne Communications 製 Linphone-Desktop における NULL ポインタ参照の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-0430 2025-01-17 11:56 2025-01-16 Show GitHub Exploit DB Packet Storm
675 9.8 緊急
Network 		Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 CWE-74
CWE-74
CVE-2023-51653 2025-01-17 11:54 2023-12-20 Show GitHub Exploit DB Packet Storm
676 7.5 重要
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software Foundation の Apache DolphinScheduler におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2023-51770 2025-01-17 11:54 2023-12-25 Show GitHub Exploit DB Packet Storm
677 5.4 警告
Network 		Brizy brizy Brizy の WordPress 用 brizy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1296 2025-01-17 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
678 7.5 重要
Network 		BoldGrid W3 Total Cache BoldGrid の WordPress 用 W3 Total Cache における脆弱性 CWE-200
CWE-noinfo
CVE-2024-12008 2025-01-17 11:54 2024-12-1 Show GitHub Exploit DB Packet Storm
679 7.5 重要
Network 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2012
Microsoft Windows Server&… 		Windows ライトウェイト ディレクトリ アクセス プロトコル (LDAP) のサービス拒否の脆弱性 CWE-476
CWE-noinfo
CVE-2024-49121 2025-01-17 10:55 2024-12-10 Show GitHub Exploit DB Packet Storm
680 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2022 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-362
CWE-416
CVE-2024-49116 2025-01-17 10:51 2024-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278021 - daniel_barron dansguardian DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request. NVD-CWE-Other
CVE-2004-2282 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278022 - daniel_barron dansguardian Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted request that causes a page to be added to the clean page cache. NVD-CWE-Other
CVE-2004-2283 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278023 - dsm light_web_file_browser Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter. NVD-CWE-Other
CVE-2004-2287 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278024 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter. NVD-CWE-Other
CVE-2004-2288 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278025 - francisco_burzi php-nuke Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences… NVD-CWE-Other
CVE-2004-2294 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278026 - novell internet_messaging_system
netmail 		Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store da… NVD-CWE-Other
CVE-2004-2298 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278027 - mbedthis_software mbedthis_appweb_http_server Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access. NVD-CWE-Other
CVE-2004-2317 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278028 - openbsd openbsd OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions. NVD-CWE-Other
CVE-2004-2338 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
278029 - symantec enterprise_firewall
gateway_security 		The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additiona… NVD-CWE-Other
CVE-2004-1754 2008-09-6 05:42 2004-06-15 Show GitHub Exploit DB Packet Storm
278030 - skype_technologies skype A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL,… CWE-20
 Improper Input Validation  		CVE-2004-1777 2008-09-6 05:42 2004-12-31 Show GitHub Exploit DB Packet Storm