Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1 9.8 緊急
Network
HGiga OAKlouds-organization-2.0
OAKlouds-organization-3.0
OAKlouds-webbase-3.0
OAKlouds-webbase-2.0
複数の HGiga 製品におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2024-26261 2025-01-24 17:53 2024-02-15 Show GitHub Exploit DB Packet Storm
2 8.8 重要
Network
MHA Sistemas arMHAzena MHA Sistemas の arMHAzena における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-2480 2025-01-24 17:48 2024-03-15 Show GitHub Exploit DB Packet Storm
3 6.5 警告
Network
ZyXEL NWA210AX ファームウェア
nwa50ax ファームウェア
WAX650S ファームウェア
NWA110AX ファームウェア
wax640s-6e ファームウェア
WAX510D ファームウェア
wac500h ファームウェア
wax620d-6e ファームウェア
複数の ZyXEL 製品における脆弱性 New CWE-269
CWE-noinfo
CVE-2024-1575 2025-01-24 17:36 2024-07-23 Show GitHub Exploit DB Packet Storm
4 8.8 重要
Network
E-WEBInformationCo. FS-EZViewer(Web) E-WEBInformationCo. の FS-EZViewer(Web) における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-1523 2025-01-24 17:32 2024-02-15 Show GitHub Exploit DB Packet Storm
5 7.8 重要
Local
インテル Intel GPA Framework インテルの Intel GPA Framework における脆弱性 New CWE-284
CWE-noinfo
CVE-2023-43748 2025-01-24 17:31 2023-10-12 Show GitHub Exploit DB Packet Storm
6 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) RecoverPoint for Virtual Machines デルの RecoverPoint for Virtual Machines における OS コマンドインジェクションの脆弱性 New CWE-434
CWE-78
CVE-2024-22426 2025-01-24 17:30 2024-02-16 Show GitHub Exploit DB Packet Storm
7 7.8 重要
Local
Ivanti Ivanti Application Control Ivanti の Ivanti Application Control における不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
CWE-276
CVE-2024-11598 2025-01-24 17:18 2024-12-11 Show GitHub Exploit DB Packet Storm
8 8.8 重要
Network
Open-Xchange
Debian
Mozilla Foundation
Debian GNU/Linux
Open-Xchange AppSuite frontend
Mozilla Thunderbird
Mozilla Firefox
Mozilla Foundation の Mozilla Firefox 等複数ベンダの製品における脆弱性 New CWE-noinfo
情報不足
CVE-2024-4367 2025-01-24 17:14 2024-04-29 Show GitHub Exploit DB Packet Storm
9 9.8 緊急
Network
Pos Tahsil Online Payment System Pos Tahsil の Online Payment System における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2023-7081 2025-01-24 17:13 2023-12-22 Show GitHub Exploit DB Packet Storm
10 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2024-57944 2025-01-24 17:03 2024-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Customizable Captcha and Contact Us allows Reflected XSS. This issue affects Customizabl… CWE-79
Cross-site Scripting
CVE-2025-23503 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
652 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faaiq Ahmed, Technial Architect,faaiqsj@gmail.com Simple Custom post type custom field allows Ref… CWE-79
Cross-site Scripting
CVE-2025-23500 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
653 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Translation.Pro allows Reflected XSS. This issue affects Translation.Pro: from n/a throu… CWE-79
Cross-site Scripting
CVE-2025-23498 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
654 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WooCommerce Order Search allows Reflected XSS. This issue affects WooCommerce Order Sear… CWE-79
Cross-site Scripting
CVE-2025-23495 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
655 - - - Missing Authorization vulnerability in NotFound Database Sync allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Database Sync: from n/a through 0.5.1. CWE-862
 Missing Authorization
CVE-2025-23486 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
656 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound History timeline allows Reflected XSS. This issue affects History timeline: from n/a thr… CWE-79
Cross-site Scripting
CVE-2025-23475 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
657 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound FWD Slider allows Reflected XSS. This issue affects FWD Slider: from n/a through 1.0. CWE-79
Cross-site Scripting
CVE-2025-23462 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
658 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Simple shortcode buttons allows Reflected XSS. This issue affects Simple shortcode butto… CWE-79
Cross-site Scripting
CVE-2025-23449 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
659 - - - A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php. - CVE-2025-22980 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
660 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Mapbox for WP Advanced allows Reflected XSS. This issue affects Mapbox for WP Advanced: … CWE-79
Cross-site Scripting
CVE-2025-22772 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm