Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
841 8.8 重要
Network 		jfinaloa project jfinaloa jfinaloa project の jfinaloa における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-57770 2025-01-23 11:48 2025-01-16 Show GitHub Exploit DB Packet Storm
842 8.8 重要
Network 		code-projects Online  Shoe Store code-projects の Online Shoe Store における脆弱性 CWE-266
CWE-284
CWE-noinfo
CVE-2025-0206 2025-01-23 11:48 2025-01-4 Show GitHub Exploit DB Packet Storm
843 7.5 重要
Network 		Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
CWE-770
CVE-2024-3382 2025-01-23 11:48 2024-04-10 Show GitHub Exploit DB Packet Storm
844 6.1 警告
Network 		フォーティネット FortiAuthenticator フォーティネットの FortiAuthenticator におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2024-23664 2025-01-23 11:47 2024-05-14 Show GitHub Exploit DB Packet Storm
845 9.8 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2023-6749 2025-01-23 11:46 2023-12-12 Show GitHub Exploit DB Packet Storm
846 8.8 重要
Network 		podsfoundation pods podsfoundation の WordPress 用 pods における脆弱性 CWE-noinfo
情報不足 		CVE-2023-6999 2025-01-23 11:46 2023-12-20 Show GitHub Exploit DB Packet Storm
847 9.8 緊急
Network 		Cozmoslabs Membership & Content Restriction - Paid Member Subscriptions Cozmoslabs の WordPress 用 Membership & Content Restriction - Paid Member Subscriptions における脆弱性 CWE-287
CWE-Other
CVE-2024-12919 2025-01-23 11:46 2024-12-24 Show GitHub Exploit DB Packet Storm
848 5.4 警告
Network 		exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1414 2025-01-23 11:46 2024-03-13 Show GitHub Exploit DB Packet Storm
849 6.5 警告
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-1974 2025-01-23 11:46 2024-04-9 Show GitHub Exploit DB Packet Storm
850 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2896 2025-01-23 11:46 2024-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275281 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data, possibly involving a large sndbuf value. CWE-20
 Improper Input Validation  		CVE-2010-0931 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
275282 - perforce perforce_server The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain MKD command. CWE-20
 Improper Input Validation  		CVE-2010-0932 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
275283 - perforce perforce_server The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjuncti… CWE-78
OS Command  		CVE-2010-0934 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
275284 - perforce perforce_server Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0935 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
275285 - cowon_america jetaudio Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file. NOTE: the provenance of this i… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-4676 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
275286 - cisco unified_communications_manager Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process fai… NVD-CWE-Other
CVE-2010-0591 2010-03-6 06:43 2010-03-6 Show GitHub Exploit DB Packet Storm
275287 - cisco unified_communications_manager The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0(1) allows remote attackers to cause a denial of service (p… NVD-CWE-Other
CVE-2010-0590 2010-03-6 06:29 2010-03-6 Show GitHub Exploit DB Packet Storm
275288 - cisco unified_communications_manager Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process fai… NVD-CWE-Other
CVE-2010-0588 2010-03-6 06:21 2010-03-6 Show GitHub Exploit DB Packet Storm
275289 - ibm lotus_domino Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2010-0927 2010-03-6 02:30 2010-03-6 Show GitHub Exploit DB Packet Storm
275290 - cisco unified_communications_manager Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial o… NVD-CWE-Other
CVE-2010-0587 2010-03-6 01:30 2010-03-6 Show GitHub Exploit DB Packet Storm