Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
821 7.8 重要
Local 		Debian
Linux		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-26895 2025-01-17 17:21 2024-02-15 Show GitHub Exploit DB Packet Storm
822 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-56787 2025-01-17 17:21 2024-10-18 Show GitHub Exploit DB Packet Storm
823 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2024-56783 2025-01-17 17:16 2024-11-28 Show GitHub Exploit DB Packet Storm
824 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における境界条件の判定に関する脆弱性 CWE-193
CWE-401
CVE-2024-56720 2025-01-17 17:14 2024-11-6 Show GitHub Exploit DB Packet Storm
825 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-46715 2025-01-17 17:12 2024-06-13 Show GitHub Exploit DB Packet Storm
826 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2022-48648 2025-01-17 17:10 2022-09-19 Show GitHub Exploit DB Packet Storm
827 8.8 重要
Network 		Huawei EGRT-00 ファームウェア Huawei の EGRT-00 ファームウェアにおける古典的バッファオーバーフローの脆弱性 CWE-119
CWE-120
CVE-2022-48681 2025-01-17 17:07 2024-05-28 Show GitHub Exploit DB Packet Storm
828 4.7 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における Time-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
CWE-476
CVE-2024-42107 2025-01-17 17:06 2024-07-3 Show GitHub Exploit DB Packet Storm
829 6.1 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2023-52497 2025-01-17 17:04 2023-12-15 Show GitHub Exploit DB Packet Storm
830 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2022 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 CWE-362
CWE-843
CVE-2024-49119 2025-01-17 16:59 2024-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275531 - opera opera_browser The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sens… NVD-CWE-Other
CVE-2007-4944 2008-11-15 14:00 2007-09-19 Show GitHub Exploit DB Packet Storm
275532 - wilson_windowware webbatch webbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the dumpinputdata parameter. CWE-200
Information Exposure 		CVE-2007-5011 2008-11-15 14:00 2007-09-21 Show GitHub Exploit DB Packet Storm
275533 - suse suse_linux Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6167 2008-11-15 14:00 2007-11-29 Show GitHub Exploit DB Packet Storm
275534 - debian unp unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename a… NVD-CWE-noinfo
CVE-2007-6610 2008-11-15 14:00 2008-01-4 Show GitHub Exploit DB Packet Storm
275535 - bea weblogic_server BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-4614 2008-11-13 15:46 2007-08-31 Show GitHub Exploit DB Packet Storm
275536 - vtiger vtiger_crm SQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before 5.0.3 allows remote authenticated users to execute arbitrary SQL commands via the assigned_user_id pa… NVD-CWE-Other
CVE-2007-3603 2008-11-13 15:42 2007-07-7 Show GitHub Exploit DB Packet Storm
275537 - vtiger vtiger_crm vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving … NVD-CWE-Other
CVE-2007-3604 2008-11-13 15:42 2007-07-7 Show GitHub Exploit DB Packet Storm
275538 - vtiger vtiger_crm The report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows remote authenticated users to read arbitrary private module entries. NVD-CWE-Other
CVE-2007-3617 2008-11-13 15:42 2007-07-7 Show GitHub Exploit DB Packet Storm
275539 - phpecho_cms phpecho_cms Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NVD-CWE-Other
CVE-2007-3335 2008-11-13 15:41 2007-06-22 Show GitHub Exploit DB Packet Storm
275540 - sun java_embedding_plugin Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclass that calls super.run from its run method. NVD-CWE-Other
CVE-2007-2906 2008-11-13 15:40 2007-05-30 Show GitHub Exploit DB Packet Storm