Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
951 7.3 重要
Network 		MantisBT Group MantisBT MantisBT Group の MantisBT における脆弱性 CWE-305
CWE-620
CWE-Other
CVE-2024-34077 2025-01-17 15:00 2024-05-14 Show GitHub Exploit DB Packet Storm
952 5.4 警告
Network 		Vanderbilt redcap Vanderbilt の redcap におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-56376 2025-01-17 15:00 2024-12-22 Show GitHub Exploit DB Packet Storm
953 6.8 警告
Physics 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2019 		Windows モバイル ブロードバンド ドライバーのリモート コード実行に対する脆弱性 CWE-190
CWE-noinfo
CVE-2024-30021 2025-01-17 15:00 2024-05-14 Show GitHub Exploit DB Packet Storm
954 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		DHCP Server サービスのサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2024-30019 2025-01-17 14:51 2024-05-14 Show GitHub Exploit DB Packet Storm
955 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Window… 		Windows ルーティングとリモート アクセス サービス (RRAS) のリモートでコードが実行される脆弱性 CWE-197
CWE-noinfo
CVE-2024-30014 2025-01-17 14:49 2024-05-14 Show GitHub Exploit DB Packet Storm
956 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Window… 		Lightweight Directory Access Protocol (LDAP) クライアントのリモートでコードが実行される脆弱性 CWE-362
競合状態 		CVE-2024-49124 2025-01-17 14:41 2024-12-10 Show GitHub Exploit DB Packet Storm
957 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のリモートでコードが実行される脆弱性 CWE-362
CWE-416
CVE-2024-49122 2025-01-17 14:37 2024-12-10 Show GitHub Exploit DB Packet Storm
958 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microso… 		Windows ルーティングとリモート アクセス サービス (RRAS) のリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-49125 2025-01-17 14:32 2024-12-10 Show GitHub Exploit DB Packet Storm
959 9.8 緊急
Network 		72crm Wukong CRM 72crm の Wukong CRM における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-23052 2025-01-17 14:28 2024-02-29 Show GitHub Exploit DB Packet Storm
960 6.1 警告
Network 		Meow Apps ai engine Meow Apps の WordPress 用 ai engine におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0378 2025-01-17 14:03 2024-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277741 - - - Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges. NVD-CWE-Other
CVE-2005-2866 2008-09-6 05:52 2005-09-9 Show GitHub Exploit DB Packet Storm
277742 - bluewhalecrm bluewhalecrm SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field. NVD-CWE-Other
CVE-2005-2867 2008-09-6 05:52 2005-09-9 Show GitHub Exploit DB Packet Storm
277743 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php… NVD-CWE-Other
CVE-2005-2869 2008-09-6 05:52 2005-09-9 Show GitHub Exploit DB Packet Storm
277744 - sun solaris Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses. NVD-CWE-Other
CVE-2005-2870 2008-09-6 05:52 2005-09-9 Show GitHub Exploit DB Packet Storm
277745 - py2play py2play Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes. NVD-CWE-Other
CVE-2005-2875 2008-09-6 05:52 2005-09-14 Show GitHub Exploit DB Packet Storm
277746 - linksys wrt54g Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value. NVD-CWE-Other
CVE-2005-2912 2008-09-6 05:52 2005-09-15 Show GitHub Exploit DB Packet Storm
277747 - linksys wrt54g ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote a… NVD-CWE-Other
CVE-2005-2914 2008-09-6 05:52 2005-09-15 Show GitHub Exploit DB Packet Storm
277748 - linksys wrt54g ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration … NVD-CWE-Other
CVE-2005-2915 2008-09-6 05:52 2005-09-15 Show GitHub Exploit DB Packet Storm
277749 - linksys wrt54g Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attacke… NVD-CWE-Other
CVE-2005-2916 2008-09-6 05:52 2005-09-15 Show GitHub Exploit DB Packet Storm
277750 - microsoft frontpage Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page. NVD-CWE-Other
CVE-2005-2143 2008-09-6 05:51 2005-07-5 Show GitHub Exploit DB Packet Storm