Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 9.8 緊急
Network 		icontrolwp iControlWP icontrolwp の WordPress 用 iControlWP における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-13742 2025-01-31 17:40 2025-01-30 Show GitHub Exploit DB Packet Storm
2 5.4 警告
Network 		ilghera MailUp Auto Subscription ilghera の WordPress 用 MailUp Auto Subscription におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-13521 2025-01-31 17:37 2025-01-28 Show GitHub Exploit DB Packet Storm
3 6.5 警告
Network 		アップル visionos
Safari
iPadOS 		複数のアップル製品における脆弱性 CWE-noinfo
情報不足 		CVE-2025-24143 2025-01-31 17:31 2025-01-27 Show GitHub Exploit DB Packet Storm
4 5.5 警告
Local 		- アップルの macOS における脆弱性 CWE-noinfo
情報不足 		CVE-2025-24096 2025-01-31 17:29 2025-01-27 Show GitHub Exploit DB Packet Storm
5 5.5 警告
Local 		- アップルの macOS における脆弱性 CWE-noinfo
情報不足 		CVE-2024-54549 2025-01-31 17:27 2024-12-11 Show GitHub Exploit DB Packet Storm
6 8.8 重要
Network 		アップル watchOS
visionos
Safari
iPadOS
iOS
tvOS 		複数のアップル製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2024-54543 2025-01-31 17:26 2024-12-11 Show GitHub Exploit DB Packet Storm
7 9.1 緊急
Network 		アップル watchOS
iPadOS
iOS 		複数のアップル製品における脆弱性 CWE-noinfo
情報不足 		CVE-2024-54512 2025-01-31 17:23 2024-12-11 Show GitHub Exploit DB Packet Storm
8 5.5 警告
Local 		アップル iOS
visionos
iPadOS
watchOS
tvOS 		複数のアップル製品における脆弱性 CWE-noinfo
情報不足 		CVE-2025-24086 2025-01-31 17:21 2025-01-27 Show GitHub Exploit DB Packet Storm
9 6.7 警告
Local 		デル Latitude 5414 Rugged ファームウェア
Latitude 5280 ファームウェア
Embedded Box PC 5000 ファームウェア
Latitude 5400 ファームウェア
Latitude 3189 ファームウェ… 		複数のデル製品における脆弱性 CWE-20
CWE-noinfo
CVE-2024-22429 2025-01-31 16:37 2024-05-17 Show GitHub Exploit DB Packet Storm
10 5.4 警告
Network 		Philantro Inc. Philantro - Donations and Donor Management Philantro Inc. の WordPress 用 Philantro - Donations and Donor Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-13527 2025-01-31 16:37 2025-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 - - - This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file. - CVE-2025-24505 2025-02-5 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1082 - - - NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. - CVE-2025-25246 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1083 - - - Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion a… - CVE-2025-1026 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1084 - - - Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter. - CVE-2025-1025 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1085 - - - Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html(), which can be bypassed by omitting the slas… - CVE-2025-1022 2025-02-5 14:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1086 - - - An improper input validation the CSRF filter results in unsanitized user input written to the application logs. - CVE-2025-24504 2025-02-5 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1087 - - - A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server. - CVE-2025-24503 2025-02-5 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1088 - - - An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address. - CVE-2025-24502 2025-02-5 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1089 - - - An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request. - CVE-2025-24501 2025-02-5 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1090 - - - The vulnerability allows an unauthenticated attacker to access information in PAM database. - CVE-2025-24500 2025-02-5 14:15 2025-01-31 Show GitHub Exploit DB Packet Storm