Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 4:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
101 7.5 重要
Network
PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア
複数の PHOENIX CONTACT 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-20
CVE-2024-26000 2025-01-24 11:19 2024-03-12 Show GitHub Exploit DB Packet Storm
102 4.9 警告
Network
openautomationsoftware oas platform openautomationsoftware の oas platform における入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2024-27201 2025-01-24 11:19 2024-04-3 Show GitHub Exploit DB Packet Storm
103 5.4 警告
Network
Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-27986 2025-01-24 11:19 2024-03-14 Show GitHub Exploit DB Packet Storm
104 7.5 重要
Network
Nextcloud Nextcloud Server Nextcloud の Nextcloud Server における重要な情報の平文保存に関する脆弱性 New CWE-312
重要な情報の平文保存
CVE-2024-52525 2025-01-24 11:19 2024-11-15 Show GitHub Exploit DB Packet Storm
105 5.4 警告
Network
moveaddons move addons for elementor moveaddons の WordPress 用 move addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-47396 2025-01-24 11:18 2024-10-1 Show GitHub Exploit DB Packet Storm
106 4.8 警告
Network
GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORG の GLPI におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-47759 2025-01-24 11:18 2024-11-15 Show GitHub Exploit DB Packet Storm
107 - - OpenSSL Project OpenSSL OpenSSL における秘密鍵のタイミング攻撃に対する問題 (OpenSSL Security Advisory [20th January 2025]) New CWE-345
データの信頼性についての不十分な検証
CVE-2024-13176 2025-01-24 11:17 2024-01-23 Show GitHub Exploit DB Packet Storm
108 6.5 警告
Adjacent
Zephyr Project Zephyr Zephyr Project の Zephyr における整数アンダーフローの脆弱性 New CWE-126
CWE-190
CWE-191
CVE-2024-3077 2025-01-24 11:17 2024-03-29 Show GitHub Exploit DB Packet Storm
109 8.8 重要
Network
LifterLMS LifterLMS WordPress 用 LifterLMS におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反
CVE-2024-31363 2025-01-24 11:17 2024-04-12 Show GitHub Exploit DB Packet Storm
110 7.8 重要
Local
PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア
複数の PHOENIX CONTACT 製品における入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2024-26002 2025-01-24 11:16 2024-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
701 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' str… - CVE-2025-21640 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
702 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21639 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
703 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structu… - CVE-2025-21638 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
704 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure … - CVE-2025-21637 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
705 - - - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'n… - CVE-2025-21636 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
706 - - - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file.c:828 CPU: 10 PID… - CVE-2025-21634 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
707 - - - In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: zero sqd->thread on tctx errors Syzkeller reports: BUG: KASAN: slab-use-after-free in thread_group_cputime+0x40… - CVE-2025-21633 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
708 - - - In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has its own set of registers. Thos… - CVE-2025-21632 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
709 - - - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-… - CVE-2025-21631 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
710 4.5 MEDIUM
Local
- - A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulatio… CWE-426
 Untrusted Search Path
CVE-2025-0567 2025-01-19 17:15 2025-01-19 Show GitHub Exploit DB Packet Storm