Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1011 5.4 警告
Network 		Booster Booster for WooCommerce Booster の WordPress 用 Booster for WooCommerce におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1534 2025-01-22 16:18 2024-03-7 Show GitHub Exploit DB Packet Storm
1012 5.4 警告
Network 		Ninja Team wp chat app Ninja Team の WordPress 用 wp chat app におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1761 2025-01-22 16:18 2024-03-7 Show GitHub Exploit DB Packet Storm
1013 8.2 重要
Network 		ThemeKraft post form ThemeKraft の WordPress 用 post form における脆弱性 CWE-noinfo
情報不足 		CVE-2024-1170 2025-01-22 16:16 2024-03-7 Show GitHub Exploit DB Packet Storm
1014 6.5 警告
Network 		ZyXEL USG FLEX 100H ファームウェア
atp700 ファームウェア
USG FLEX 100AX ファームウェア
usg flex 100 ファームウェア
ATP200 ファームウェア
ATP100 ファームウェア
usg f… 		複数の ZyXEL 製品における脆弱性 CWE-134
CWE-noinfo
CVE-2023-6399 2025-01-22 15:58 2023-11-30 Show GitHub Exploit DB Packet Storm
1015 7.5 重要
Network 		ThemeKraft post form ThemeKraft の WordPress 用 post form における脆弱性 CWE-noinfo
情報不足 		CVE-2024-1169 2025-01-22 15:58 2024-03-7 Show GitHub Exploit DB Packet Storm
1016 5.4 警告
Network 		bdthemes prime slider bdthemes の WordPress 用 prime slider におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1506 2025-01-22 15:57 2024-03-7 Show GitHub Exploit DB Packet Storm
1017 7.3 重要
Local 		Rockwell Automation Arena Rockwell Automation の Arena における初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2024-11364 2025-01-22 15:57 2024-12-19 Show GitHub Exploit DB Packet Storm
1018 9.8 緊急
Network 		The Biosig Project
Fedora Project		 Fedora
libbiosig 		The Biosig Project の libbiosig 等複数ベンダの製品における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2024-22097 2025-01-22 15:57 2024-02-20 Show GitHub Exploit DB Packet Storm
1019 4.9 警告
Network 		webtrees.net webtrees webtrees.net の webtrees におけるパストラバーサルの脆弱性 CWE-22
CWE-31
CVE-2024-22723 2025-01-22 15:57 2024-02-28 Show GitHub Exploit DB Packet Storm
1020 9.8 緊急
Network 		Fortra filecatalyst workflow Fortra の filecatalyst workflow における誤った領域へのリソースの漏えいに関する脆弱性 CWE-472
CWE-668
CVE-2024-25153 2025-01-22 15:57 2024-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 - - - An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a… - CVE-2025-0477 2025-01-31 03:15 2025-01-31 Show GitHub Exploit DB Packet Storm
832 - - - Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting fe… - CVE-2023-29080 2025-01-31 03:15 2025-01-31 Show GitHub Exploit DB Packet Storm
833 5.5 MEDIUM
Local 		apple iphone_os
ipados 		This issue was addressed with improved handling of symlinks. This issue is fixed in iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3. Restoring a maliciously crafted backup file may lead to modification of pr… CWE-59
Link Following 		CVE-2025-24104 2025-01-31 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
834 8.8 HIGH
Network 		apple watchos
ipados
macos
tvos
safari
visionos
iphone_os 		The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously … CWE-787
 Out-of-bounds Write 		CVE-2024-54543 2025-01-31 03:13 2025-01-28 Show GitHub Exploit DB Packet Storm
835 8.8 HIGH
Network 		apple macos
ipados
iphone_os
safari 		A privacy issue was addressed with improved handling of files. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Copying a URL from Web Inspector may lead to command i… CWE-77
Command Injection 		CVE-2025-24150 2025-01-31 03:10 2025-01-28 Show GitHub Exploit DB Packet Storm
836 3.3 LOW
Local 		apple macos
ipados
iphone_os 		A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. An app may be able to view a contact's phone n… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2025-24145 2025-01-31 03:04 2025-01-28 Show GitHub Exploit DB Packet Storm
837 7.5 HIGH
Network 		jyothisjoy eventer The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees' function in all versions up to, and including, 3.9.8 due to insufficient escap… CWE-89
SQL Injection 		CVE-2024-11135 2025-01-31 03:03 2025-01-28 Show GitHub Exploit DB Packet Storm
838 6.5 MEDIUM
Network 		apple macos
ipados
safari
visionos 		The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted web… NVD-CWE-noinfo
CVE-2025-24143 2025-01-31 03:03 2025-01-28 Show GitHub Exploit DB Packet Storm
839 3.3 LOW
Local 		apple ipados
iphone_os 		An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. An attacker with physical access to an unlocked device may be able to access Pho… NVD-CWE-noinfo
CVE-2025-24141 2025-01-31 03:03 2025-01-28 Show GitHub Exploit DB Packet Storm
840 9.8 CRITICAL
Network 		themerex addons The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions up to, and includin… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-13448 2025-01-31 03:01 2025-01-28 Show GitHub Exploit DB Packet Storm