Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
81	4.1	警告 Network	マイクロソフト	Microsoft Dynamics 365	Dynamics 365 Customer Insights のなりすましの脆弱性 New	CWE-79 CWE-79	CVE-2024-30047	2025-01-10 15:19	2024-05-14	Show	GitHub Exploit DB Packet Storm

82	8.8	重要 Network	Atakan Au	1 click disable all	Atakan Au の WordPress 用 1 click disable all におけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 同一生成元ポリシー違反	CVE-2024-21749	2025-01-10 15:18	2024-02-28	Show	GitHub Exploit DB Packet Storm

83	5.3	警告 Network	Themeperch	Build & Control Block Patterns - Boost up Gutenberg Editor	Themeperch の WordPress 用 Build & Control Block Patterns - Boost up Gutenberg Editor における認証の欠如に関する脆弱性 New	CWE-862 認証の欠如	CVE-2024-1095	2025-01-10 15:14	2024-03-5	Show	GitHub Exploit DB Packet Storm

84	8.1	重要 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Windows Server 2022 Microsoft Windows Server 2016	Windows リモートデスクトップサービスのリモートでコードが実行される脆弱性 New	CWE-362 CWE-416 CWE-591	CVE-2024-49108	2025-01-10 14:55	2024-12-10	Show	GitHub Exploit DB Packet Storm

85	7.8	重要 Local	クアルコム	SD821 ファームウェア SD626 ファームウェア SD820 ファームウェア APQ8037 ファームウェア 9206 lte modem ファームウェア	複数のクアルコム製品における脆弱性 New	CWE-284 CWE-Other	CVE-2016-10408	2025-01-10 14:55	2024-11-26	Show	GitHub Exploit DB Packet Storm

86	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Windows 10 Microsoft Window…	Windows ルーティングとリモートアクセスサービス (RRAS) のリモートでコードが実行される脆弱性 New	CWE-122 CWE-noinfo	CVE-2024-49102	2025-01-10 14:50	2024-12-10	Show	GitHub Exploit DB Packet Storm

87	8.8	重要 Network	XWiki	xwiki	XWiki の xwiki におけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 CWE-352	CVE-2024-31988	2025-01-10 14:45	2024-04-10	Show	GitHub Exploit DB Packet Storm

88	9.8	緊急 Network	XWiki	xwiki	XWiki の xwiki におけるコードインジェクションの脆弱性 New	CWE-94 CWE-95	CVE-2024-31996	2025-01-10 14:45	2024-04-10	Show	GitHub Exploit DB Packet Storm

89	7.5	重要 Network	argoproj	argo cd	argoproj の argo cd における脆弱性 New	CWE-400 CWE-noinfo	CVE-2024-40634	2025-01-10 14:45	2024-07-22	Show	GitHub Exploit DB Packet Storm

90	5.5	警告 Local	デル	EMC PowerScale OneFS	デルの EMC PowerScale OneFS における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 New	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2024-47475	2025-01-10 14:45	2024-09-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277721	-	sgi apple bsd sun	irix a_ux bsd sunos	lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000…	NVD-CWE-Other	CVE-1999-1102	2008-09-6 05:18	1999-12-31	Show	GitHub Exploit DB Packet Storm

277722	-	digital	osf_1	dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.	NVD-CWE-Other	CVE-1999-1103	2008-09-6 05:18	1996-04-3	Show	GitHub Exploit DB Packet Storm

277723	-	microsoft	windows_95	Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary f…	NVD-CWE-Other	CVE-1999-1105	2008-09-6 05:18	1999-12-31	Show	GitHub Exploit DB Packet Storm

277724	-	hp	apollo_domain_os	Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh).	NVD-CWE-Other	CVE-1999-1115	2008-09-6 05:18	1990-12-31	Show	GitHub Exploit DB Packet Storm

277725	-	allaire	coldfusion	HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which reques…	NVD-CWE-Other	CVE-1999-1124	2008-09-6 05:18	1999-12-31	Show	GitHub Exploit DB Packet Storm

277726	-	sco	open_desktop unix	Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.	NVD-CWE-Other	CVE-1999-1162	2008-09-6 05:18	1993-05-24	Show	GitHub Exploit DB Packet Storm

277727	-	linux	linux_kernel	Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.	NVD-CWE-Other	CVE-1999-1166	2008-09-6 05:18	1999-07-11	Show	GitHub Exploit DB Packet Storm

277728	-	iss	internet_security_scanner	install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.	NVD-CWE-Other	CVE-1999-1168	2008-09-6 05:18	1999-02-20	Show	GitHub Exploit DB Packet Storm

277729	-	maximizer	maximizer_enterprise	By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.	NVD-CWE-Other	CVE-1999-1172	2008-09-6 05:18	1999-01-14	Show	GitHub Exploit DB Packet Storm

277730	-	sysadmin_magazine	man.sh	Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-1999-1179	2008-09-6 05:18	1998-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed