Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 30, 2025, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
861	5.3	警告 Adjacent	ZyXEL	ATP500 ファームウェア ATP800 ファームウェア ATP100 ファームウェア atp700 ファームウェア atp100w ファームウェア ATP200 ファームウェア USG FLEX 100H ファームウェア usg flex 1…	複数の ZyXEL 製品における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2023-6397	2025-01-22 16:54	2023-11-30	Show	GitHub Exploit DB Packet Storm

862	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows 11 Microsoft Windows Server 2025 Microsoft Windows Server&…	Windows 仮想化ベースセキュリティ (VBS) のセキュリティ機能バイパスの脆弱性	CWE-284 CWE-noinfo	CVE-2025-21340	2025-01-22 16:54	2025-01-14	Show	GitHub Exploit DB Packet Storm

863	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-57801	2025-01-22 16:52	2024-12-23	Show	GitHub Exploit DB Packet Storm

864	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2024-57882	2025-01-22 16:52	2024-12-30	Show	GitHub Exploit DB Packet Storm

865	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2024-57890	2025-01-22 16:52	2024-12-4	Show	GitHub Exploit DB Packet Storm

866	5.6	警告 Local	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microsoft Windows 10 Microsoft Window…	Windows 暗号化の情報漏えいの脆弱性	CWE-noinfo 情報不足	CVE-2025-21336	2025-01-22 16:52	2025-01-14	Show	GitHub Exploit DB Packet Storm

867	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-57900	2025-01-22 16:49	2024-12-30	Show	GitHub Exploit DB Packet Storm

868	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性	CWE-noinfo 情報不足	CVE-2024-57895	2025-01-22 16:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

869	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2024-36476	2025-01-22 16:45	2024-12-31	Show	GitHub Exploit DB Packet Storm

870	5.4	警告 Network	デル	elastic cloud storage	デルの elastic cloud storage における Capture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2024-52534	2025-01-22 16:44	2024-12-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276261	-	hp	openvms	The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to…	NVD-CWE-Other	CVE-2007-3730	2008-11-15 15:53	2007-07-13	Show	GitHub Exploit DB Packet Storm

276262	-	avaya	ip_soft_phone	Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-3286	2008-11-15 15:52	2007-09-20	Show	GitHub Exploit DB Packet Storm

276263	-	xunlei	web_thunderbolt	The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous met…	NVD-CWE-Other	CVE-2007-3296	2008-11-15 15:52	2007-06-21	Show	GitHub Exploit DB Packet Storm

276264	-	iptel	serweb	Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter to (1) html/load_apu.…	NVD-CWE-Other	CVE-2007-3359	2008-11-15 15:52	2007-06-23	Show	GitHub Exploit DB Packet Storm

276265	-	iptel	serweb	Successful exploitation requires that "register_globals" is enabled.	NVD-CWE-Other	CVE-2007-3359	2008-11-15 15:52	2007-06-23	Show	GitHub Exploit DB Packet Storm

276266	-	ibm	websphere_application_server	The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed con…	NVD-CWE-Other	CVE-2007-3397	2008-11-15 15:52	2007-06-27	Show	GitHub Exploit DB Packet Storm

276267	-	web-app.org	webapp	Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string…	NVD-CWE-Other	CVE-2007-3417	2008-11-15 15:52	2007-06-27	Show	GitHub Exploit DB Packet Storm

276268	-	web-app.org	webapp	The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authentic…	NVD-CWE-Other	CVE-2007-3418	2008-11-15 15:52	2007-06-27	Show	GitHub Exploit DB Packet Storm

276269	-	web-app.org	webapp	The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.d…	NVD-CWE-Other	CVE-2007-3419	2008-11-15 15:52	2007-06-27	Show	GitHub Exploit DB Packet Storm

276270	-	web-app.org	webapp	The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not clear the (1) username, (2) password, (3) usertheme, and (4)…	NVD-CWE-Other	CVE-2007-3420	2008-11-15 15:52	2007-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed