Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
91 8.8 重要
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2023-6743 2025-01-31 11:38 2023-12-12 Show GitHub Exploit DB Packet Storm
92 9.8 緊急
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor における脆弱性 CWE-269
CWE-noinfo
CVE-2023-37999 2025-01-31 11:38 2023-07-11 Show GitHub Exploit DB Packet Storm
93 7.2 重要
Network 		weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-0956 2025-01-31 11:37 2024-03-29 Show GitHub Exploit DB Packet Storm
94 9.8 緊急
Network 		- IBM の Security Verify Access におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2024-49805 2025-01-31 11:00 2024-11-29 Show GitHub Exploit DB Packet Storm
95 8.8 重要
Network 		IBM IBM DevOps Deploy
IBM UrbanCode Deploy 		IBM の IBM DevOps Deploy および IBM UrbanCode Deploy におけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2024-22358 2025-01-31 11:00 2024-04-11 Show GitHub Exploit DB Packet Storm
96 5.4 警告
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0367 2025-01-31 10:48 2024-03-30 Show GitHub Exploit DB Packet Storm
97 6.1 警告
Network 		weDevs wp erp weDevs の WordPress 用 wp erp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0609 2025-01-31 10:48 2024-03-29 Show GitHub Exploit DB Packet Storm
98 7.2 重要
Network 		weDevs wp erp weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-0952 2025-01-31 10:48 2024-04-9 Show GitHub Exploit DB Packet Storm
99 9.8 緊急
Network 		ThemeREX Addons ThemeREX の WordPress 用 Addons における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-13448 2025-01-31 10:48 2025-01-28 Show GitHub Exploit DB Packet Storm
100 4.4 警告
Local 		Google Android Google の Android における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2024-20020 2025-01-31 10:48 2024-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 - - - pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Incorrect symlink checks on user specified dojos allows for users (admin not requ… CWE-200
CWE-61
Information Exposure
 UNIX Symbolic Link (Symlink) Following 		CVE-2025-24886 2025-01-31 08:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1022 - - - pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Missing access control on rendering custom (unprivileged) dojo pages causes abili… CWE-79
CWE-284
Cross-site Scripting
Improper Access Control 		CVE-2025-24885 2025-01-31 08:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1023 - - - A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of … - CVE-2025-0881 2025-01-31 07:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1024 - - - The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges. - CVE-2025-24099 2025-01-31 07:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1025 - - - In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify th… - CVE-2024-57276 2025-01-31 07:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1026 6.3 MEDIUM
Network 		- - A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The … CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0882 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1027 6.3 MEDIUM
Network 		- - A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0880 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1028 - - - Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PAC… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2025-0574 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1029 - - - Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS… CWE-22
Path Traversal 		CVE-2025-0573 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1030 - - - Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of… CWE-22
Path Traversal 		CVE-2025-0572 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm