Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 9.8 緊急
Network 		HGiga OAKlouds-organization-2.0
OAKlouds-organization-3.0
OAKlouds-webbase-3.0
OAKlouds-webbase-2.0 		複数の HGiga 製品におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2024-26261 2025-01-24 17:53 2024-02-15 Show GitHub Exploit DB Packet Storm
2 8.8 重要
Network 		MHA Sistemas arMHAzena MHA Sistemas の arMHAzena における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-2480 2025-01-24 17:48 2024-03-15 Show GitHub Exploit DB Packet Storm
3 6.5 警告
Network 		ZyXEL NWA210AX ファームウェア
nwa50ax ファームウェア
WAX650S ファームウェア
NWA110AX ファームウェア
wax640s-6e ファームウェア
WAX510D ファームウェア
wac500h ファームウェア
wax620d-6e ファームウェア 		複数の ZyXEL 製品における脆弱性 New CWE-269
CWE-noinfo
CVE-2024-1575 2025-01-24 17:36 2024-07-23 Show GitHub Exploit DB Packet Storm
4 8.8 重要
Network 		E-WEBInformationCo. FS-EZViewer(Web) E-WEBInformationCo. の FS-EZViewer(Web) における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-1523 2025-01-24 17:32 2024-02-15 Show GitHub Exploit DB Packet Storm
5 7.8 重要
Local 		インテル Intel GPA Framework インテルの Intel GPA Framework における脆弱性 New CWE-284
CWE-noinfo
CVE-2023-43748 2025-01-24 17:31 2023-10-12 Show GitHub Exploit DB Packet Storm
6 9.8 緊急
Network 		DELL EMC (旧 EMC Corporation) RecoverPoint for Virtual Machines デルの RecoverPoint for Virtual Machines における OS コマンドインジェクションの脆弱性 New CWE-434
CWE-78
CVE-2024-22426 2025-01-24 17:30 2024-02-16 Show GitHub Exploit DB Packet Storm
7 7.8 重要
Local 		Ivanti Ivanti Application Control Ivanti の Ivanti Application Control における不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
CWE-276
CVE-2024-11598 2025-01-24 17:18 2024-12-11 Show GitHub Exploit DB Packet Storm
8 8.8 重要
Network 		Open-Xchange
Debian
Mozilla Foundation		 Debian GNU/Linux
Open-Xchange AppSuite frontend
Mozilla Thunderbird
Mozilla Firefox 		Mozilla Foundation の Mozilla Firefox 等複数ベンダの製品における脆弱性 New CWE-noinfo
情報不足 		CVE-2024-4367 2025-01-24 17:14 2024-04-29 Show GitHub Exploit DB Packet Storm
9 9.8 緊急
Network 		Pos Tahsil Online Payment System Pos Tahsil の Online Payment System における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2023-7081 2025-01-24 17:13 2023-12-22 Show GitHub Exploit DB Packet Storm
10 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-57944 2025-01-24 17:03 2024-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
631 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assigned and freed in adv7533_parse_dt(), and … Update CWE-416
 Use After Free 		CVE-2024-57887 2025-01-22 02:40 2025-01-15 Show GitHub Exploit DB Packet Storm
632 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported the following splat: Oops: general protection fault, probably for non-canonical… Update CWE-476
 NULL Pointer Dereference 		CVE-2024-57882 2025-01-22 02:39 2025-01-15 Show GitHub Exploit DB Packet Storm
633 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcp_conn_request() If inet_csk_reqsk_queue_hash_add() return false, tcp_conn_request() will return withou… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-57841 2025-01-22 02:38 2025-01-15 Show GitHub Exploit DB Packet Storm
634 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Syzkaller reports an uninit value read from ax25cmp when sending raw message thro… Update CWE-908
 Use of Uninitialized Resource 		CVE-2024-57802 2025-01-22 02:16 2025-01-15 Show GitHub Exploit DB Packet Storm
635 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2025-0623 2025-01-22 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
636 - - - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in Payara Platform Payara Server (Grizzly, REST Management Interface modules), Payara Platf… New - CVE-2024-45687 2025-01-22 02:15 2025-01-22 Show GitHub Exploit DB Packet Storm
637 - - - In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This could lead to local denial of service with no addit… Update - CVE-2018-9447 2025-01-22 02:15 2025-01-18 Show GitHub Exploit DB Packet Storm
638 - - - In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege with no additional execution privileges nee… Update - CVE-2018-9434 2025-01-22 02:15 2025-01-18 Show GitHub Exploit DB Packet Storm
639 - - - In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execution privileges needed. User interaction … Update - CVE-2018-9384 2025-01-22 02:15 2025-01-18 Show GitHub Exploit DB Packet Storm
640 - - - In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. U… Update - CVE-2018-9383 2025-01-22 02:15 2025-01-18 Show GitHub Exploit DB Packet Storm