Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
91 7.5 重要
Network 		Huawei HarmonyOS
EMUI 		Huawei の EMUI および HarmonyOS における脆弱性 New CWE-840
CWE-noinfo
CVE-2024-54098 2025-01-14 15:45 2024-12-12 Show GitHub Exploit DB Packet Storm
92 9.8 緊急
Network 		XWiki xwiki XWiki の xwiki におけるエンコードおよびエスケープに関する脆弱性 New CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2024-55663 2025-01-14 15:45 2024-12-12 Show GitHub Exploit DB Packet Storm
93 9.8 緊急
Network 		code-projects Online  Shoe Store code-projects の Online Shoe Store における SQL インジェクションの脆弱性 New CWE-74
CWE-89
CWE-89
CVE-2025-0208 2025-01-14 15:45 2025-01-4 Show GitHub Exploit DB Packet Storm
94 9.8 緊急
Network 		school faculty scheduling system project school faculty scheduling system campcodes の School Faculty Scheduling System における脆弱性 New CWE-73
CWE-Other
CVE-2025-0211 2025-01-14 15:45 2025-01-4 Show GitHub Exploit DB Packet Storm
95 7.3 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Window… 		WmsRepair サービスの特権昇格の脆弱性 New CWE-284
CWE-59
CWE-noinfo
CVE-2024-49107 2025-01-14 15:39 2024-12-10 Show GitHub Exploit DB Packet Storm
96 4.6 警告
Physics 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&… 		Windows モバイル ブロードバンド ドライバーの情報漏えいの脆弱性 New CWE-20
CWE-noinfo
CVE-2024-49087 2025-01-14 15:37 2024-12-10 Show GitHub Exploit DB Packet Storm
97 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2012 		Windows Hyper-V のリモートでコードが実行される脆弱性 New CWE-23
CWE-noinfo
CVE-2024-30010 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
98 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server&… 		Windows Hyper-V のリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-30017 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
99 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Window… 		Windows ルーティングとリモート アクセス サービス (RRAS) のリモートでコードが実行される脆弱性 New CWE-197
CWE-noinfo
CVE-2024-30024 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
100 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows Server 2022 		Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
CWE-noinfo
CVE-2024-30035 2025-01-14 15:36 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 7.5 HIGH
Network 		huawei emui
harmonyos 		Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Update CWE-287
Improper Authentication 		CVE-2023-52955 2025-01-14 04:09 2025-01-8 Show GitHub Exploit DB Packet Storm
352 7.5 HIGH
Network 		huawei emui
harmonyos 		Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. Update CWE-276
Incorrect Default Permissions  		CVE-2023-52954 2025-01-14 04:09 2025-01-8 Show GitHub Exploit DB Packet Storm
353 9.1 CRITICAL
Network 		huawei emui
harmonyos 		Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Update CWE-22
Path Traversal 		CVE-2023-52953 2025-01-14 04:08 2025-01-8 Show GitHub Exploit DB Packet Storm
354 - - - An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42. New CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2024-5743 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
355 - - - Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution. New - CVE-2024-46479 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
356 - - - A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert New - CVE-2024-6352 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
357 - - - Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile. New - CVE-2024-12211 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
358 - - - Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS < 134. Update - CVE-2025-23109 2025-01-14 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
359 - - - Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability affects Firefox for iOS < 134. Update - CVE-2025-23108 2025-01-14 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
360 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - ArticleFeedbackv5 extension allows Cross-Site Scripting (… Update - CVE-2025-23079 2025-01-14 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm