Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 30, 2025, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
821	5.4	警告 Network	properfraction	profilepress	properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1570	2025-01-23 11:09	2024-02-29	Show	GitHub Exploit DB Packet Storm

822	7.5	重要 Network	StylemixThemes	MasterStudy LMS	StylemixThemes の WordPress 用 MasterStudy LMS における脆弱性	CWE-noinfo 情報不足	CVE-2024-2106	2025-01-23 11:09	2024-03-13	Show	GitHub Exploit DB Packet Storm

823	9.8	緊急 Network	The Biosig Project Fedora Project	libbiosig Fedora	The Biosig Project の libbiosig 等複数ベンダの製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2024-23809	2025-01-23 11:09	2024-02-20	Show	GitHub Exploit DB Packet Storm

824	9.6	緊急 Network	lfprojects	mlflow	lfprojects の mlflow におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-27132	2025-01-23 11:09	2024-02-23	Show	GitHub Exploit DB Packet Storm

825	5.4	警告 Network	IBM	IBM Sterling Partner Engagement Manager	IBM の IBM Sterling Partner Engagement Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2023-28517	2025-01-23 10:49	2023-03-16	Show	GitHub Exploit DB Packet Storm

826	9.8	緊急 Network	IBM	Trusteer Android SDK for mobile Trusteer iOS SDK for mobile	IBM の Trusteer Android SDK for mobile および Trusteer iOS SDK for mobile における脆弱性	CWE-434 CWE-noinfo	CVE-2022-42443	2025-01-23 10:25	2022-10-6	Show	GitHub Exploit DB Packet Storm

827	8.2	重要 Network	Apache Software Foundation	Apache Pulsar	Apache Software Foundation の Apache Pulsar における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2022-34321	2025-01-23 10:12	2022-06-22	Show	GitHub Exploit DB Packet Storm

828	6.1	警告 Network	properfraction	profilepress	properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1519	2025-01-23 10:12	2024-02-29	Show	GitHub Exploit DB Packet Storm

829	5.4	警告 Network	properfraction	profilepress	properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-1535	2025-01-23 10:12	2024-03-13	Show	GitHub Exploit DB Packet Storm

830	5.4	警告 Network	exclusiveaddons	exclusive addons for elementor	exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-2028	2025-01-23 10:12	2024-03-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280511	-	sco	openserver	snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.	NVD-CWE-Other	CVE-2000-0147	2008-09-6 05:20	2000-02-8	Show	GitHub Exploit DB Packet Storm

280512	-	realnetworks	realplayer	Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.	NVD-CWE-Other	CVE-2000-0280	2008-09-6 05:20	2000-04-3	Show	GitHub Exploit DB Packet Storm

280513	-	napster	napster_client	Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.	NVD-CWE-Other	CVE-2000-0281	2008-09-6 05:20	2000-03-26	Show	GitHub Exploit DB Packet Storm

280514	-	sco	open_desktop openserver unixware	Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.	NVD-CWE-Other	CVE-2000-0307	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

280515	-	netscape sco	enterprise_server fasttrack_server proxy_server unixware	Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.	NVD-CWE-Other	CVE-2000-0308	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

280516	-	openbsd	openbsd	cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.	NVD-CWE-Other	CVE-2000-0312	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

280517	-	sco	unixware	A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.	NVD-CWE-Other	CVE-2000-0348	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

280518	-	sco	unixware	Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.	NVD-CWE-Other	CVE-2000-0349	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

280519	-	intel	netstructure_7110 netstructure_7180	NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain …	NVD-CWE-Other	CVE-2000-0384	2008-09-6 05:20	2000-05-8	Show	GitHub Exploit DB Packet Storm

280520	-	microsoft	outlook outlook_express	Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.	NVD-CWE-Other	CVE-2000-0415	2008-09-6 05:20	2000-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed