Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
901 8.8 重要
Network 		Creativetiem academy lms kodezen の WordPress 用 academy lms における脆弱性 CWE-noinfo
情報不足 		CVE-2024-1505 2025-01-23 11:34 2024-03-13 Show GitHub Exploit DB Packet Storm
902 8.8 重要
Network 		podsfoundation pods podsfoundation の WordPress 用 pods における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2023-6967 2025-01-23 11:33 2023-12-19 Show GitHub Exploit DB Packet Storm
903 8.8 重要
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47760 2025-01-23 11:32 2023-11-9 Show GitHub Exploit DB Packet Storm
904 9.8 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2023-5779 2025-01-23 11:31 2023-10-26 Show GitHub Exploit DB Packet Storm
905 4.3 警告
Network 		podsfoundation pods podsfoundation の WordPress 用 pods における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-6965 2025-01-23 11:31 2023-12-19 Show GitHub Exploit DB Packet Storm
906 8.8 重要
Network 		Sonaar Music mp3 audio player for music
 radio & podcast 		Sonaar Music の WordPress 用 mp3 audio player for music, radio & podcast における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47822 2025-01-23 11:31 2023-11-12 Show GitHub Exploit DB Packet Storm
907 8.8 重要
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2023-51529 2025-01-23 11:31 2023-12-20 Show GitHub Exploit DB Packet Storm
908 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2891 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
909 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2895 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
910 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2902 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 5, 2025, 4:56 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274931 - mysql maxdb The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler … NVD-CWE-Other
CVE-2005-0082 2011-03-8 11:19 2005-04-14 Show GitHub Exploit DB Packet Storm
274932 - mysql maxdb Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter. NVD-CWE-Other
CVE-2005-0111 2011-03-8 11:19 2005-01-13 Show GitHub Exploit DB Packet Storm
274933 - sco unixware The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets. NVD-CWE-Other
CVE-2005-0134 2011-03-8 11:19 2005-05-18 Show GitHub Exploit DB Packet Storm
274934 - recipants recipants Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user id, (2) recipe id, (3) category id, and (4) other… NVD-CWE-Other
CVE-2004-2568 2011-03-8 11:19 2004-12-31 Show GitHub Exploit DB Packet Storm
274935 - phpgroupware phpgroupware Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicale… NVD-CWE-Other
CVE-2004-2574 2011-03-8 11:19 2004-12-31 Show GitHub Exploit DB Packet Storm
274936 - phpgroupware phpgroupware phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4… NVD-CWE-Other
CVE-2004-2575 2011-03-8 11:19 2004-12-31 Show GitHub Exploit DB Packet Storm
274937 - gnu emacs Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstr… NVD-CWE-Other
CVE-2003-1232 2011-03-8 11:13 2003-12-31 Show GitHub Exploit DB Packet Storm
274938 - apple afp_server Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files. NVD-CWE-Other
CVE-2003-0379 2011-03-8 11:12 2003-07-24 Show GitHub Exploit DB Packet Storm
274939 - apple darwin_streaming_server Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a requ… NVD-CWE-Other
CVE-2003-0502 2011-03-8 11:12 2003-08-27 Show GitHub Exploit DB Packet Storm
274940 - compaq tru64 Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables. NVD-CWE-Other
CVE-2002-2002 2011-03-8 11:11 2002-12-31 Show GitHub Exploit DB Packet Storm