Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
831 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2025 		Microsoft Resilient File System の特権昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2025-21315 2025-01-23 11:58 2025-01-14 Show GitHub Exploit DB Packet Storm
832 4.3 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window… 		MapUrlToZone セキュリティ機能のバイパスの脆弱性 CWE-41
CWE-noinfo
CVE-2025-21329 2025-01-23 11:58 2025-01-14 Show GitHub Exploit DB Packet Storm
833 4.9 警告
Network 		フォーティネット FortiAnalyzer
FortiManager
FortiAnalyzer-BigData 		複数のフォーティネット製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-32117 2025-01-23 11:50 2024-11-12 Show GitHub Exploit DB Packet Storm
834 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2900 2025-01-23 11:49 2024-03-26 Show GitHub Exploit DB Packet Storm
835 9.8 緊急
Network 		StylemixThemes MasterStudy LMS StylemixThemes の WordPress 用 MasterStudy LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-37094 2025-01-23 11:49 2024-11-1 Show GitHub Exploit DB Packet Storm
836 8.8 重要
Network 		Sonaar Music mp3 audio player for music
 radio & podcast 		Sonaar Music の WordPress 用 mp3 audio player for music, radio & podcast における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-56266 2025-01-23 11:49 2024-12-18 Show GitHub Exploit DB Packet Storm
837 6.5 警告
Network 		フォーティネット FortiSOAR フォーティネットの FortiSOAR における保存または転送前の重要な情報の削除に関する脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除 		CVE-2024-31493 2025-01-23 11:48 2024-05-14 Show GitHub Exploit DB Packet Storm
838 5.4 警告
Network 		Themeisle otter blocks ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3343 2025-01-23 11:48 2024-04-11 Show GitHub Exploit DB Packet Storm
839 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2024-57583 2025-01-23 11:48 2025-01-16 Show GitHub Exploit DB Packet Storm
840 8.8 重要
Network 		jfinaloa project jfinaloa jfinaloa project の jfinaloa における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-57769 2025-01-23 11:48 2025-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275321 - tibco administrator Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes… NVD-CWE-noinfo
CVE-2010-0683 2010-02-26 14:00 2010-02-26 Show GitHub Exploit DB Packet Storm
275322 - aspcodecms aspcode_cms SQL injection vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the newsid parameter when … CWE-89
SQL Injection 		CVE-2010-0710 2010-02-26 14:00 2010-02-26 Show GitHub Exploit DB Packet Storm
275323 - webmin usermin
webmin 		Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2009-4568 2010-02-24 16:19 2010-01-6 Show GitHub Exploit DB Packet Storm
275324 - videosearchscript videosearchscript_pro Cross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter. CWE-79
Cross-site Scripting 		CVE-2010-0699 2010-02-24 14:00 2010-02-24 Show GitHub Exploit DB Packet Storm
275325 - zeuscms zeuscms Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter. CWE-22
Path Traversal 		CVE-2010-0680 2010-02-24 02:14 2010-02-23 Show GitHub Exploit DB Packet Storm
275326 - zeuscms zeuscms ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0681 2010-02-24 02:14 2010-02-23 Show GitHub Exploit DB Packet Storm
275327 - weberr com_rwcards Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter. CWE-22
Path Traversal 		CVE-2010-0676 2010-02-24 01:18 2010-02-23 Show GitHub Exploit DB Packet Storm
275328 - copperleaf photolog SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parame… CWE-89
SQL Injection 		CVE-2010-0673 2010-02-23 14:00 2010-02-23 Show GitHub Exploit DB Packet Storm
275329 - bgsvetionik bgs_cms Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: s… CWE-79
Cross-site Scripting 		CVE-2010-0675 2010-02-23 14:00 2010-02-23 Show GitHub Exploit DB Packet Storm
275330 - katalog.hurricane katalog_stron_hurricane SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter. CWE-89
SQL Injection 		CVE-2010-0677 2010-02-23 14:00 2010-02-23 Show GitHub Exploit DB Packet Storm