Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
101 7.8 重要
Local 		インテル graphics performance analyzers インテルの graphics performance analyzers における制御されていない検索パスの要素に関する脆弱性 New CWE-427
CWE-427
CVE-2023-41961 2025-01-24 11:54 2023-10-12 Show GitHub Exploit DB Packet Storm
102 7.8 重要
Local 		インテル graphics performance analyzers インテルの graphics performance analyzers における不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
CWE-276
CVE-2023-43629 2025-01-24 11:54 2023-10-12 Show GitHub Exploit DB Packet Storm
103 7.8 重要
Local 		インテル graphics performance analyzers インテルの graphics performance analyzers における制御されていない検索パスの要素に関する脆弱性 New CWE-427
CWE-427
CVE-2024-21788 2025-01-24 11:54 2024-05-16 Show GitHub Exploit DB Packet Storm
104 7.5 重要
Network 		F5 Networks BIG-IP Application Security Manager (ASM)
BIG-IP Advanced Web Application Firewall (WAF) 		F5 Networks の BIG-IP Advanced Web Application Firewall (WAF) および BIG-IP Application Security Manager (ASM) におけるバッファサイズの計算の誤りに関する脆弱性 New CWE-131
CWE-131
CVE-2024-23805 2025-01-24 11:45 2024-02-14 Show GitHub Exploit DB Packet Storm
105 5.4 警告
Network 		Themeisle otter blocks ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2841 2025-01-24 11:32 2024-03-29 Show GitHub Exploit DB Packet Storm
106 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3210 2025-01-24 11:32 2024-04-10 Show GitHub Exploit DB Packet Storm
107 9.8 緊急
Network 		ZyXEL NAS 326 ファームウェア
NAS 542 ファームウェア 		ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 New CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-29974 2025-01-24 11:32 2024-06-4 Show GitHub Exploit DB Packet Storm
108 8.8 重要
Network 		webangon the pack elementor addons webangon の WordPress 用 the pack elementor addons におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2024-38768 2025-01-24 11:32 2024-08-1 Show GitHub Exploit DB Packet Storm
109 5.4 警告
Network 		themelooks enter addons themelooks の WordPress 用 enter addons におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-43225 2025-01-24 11:31 2024-08-12 Show GitHub Exploit DB Packet Storm
110 4.8 警告
Network 		webangon the pack elementor addons webangon の WordPress 用 the pack elementor addons におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-47383 2025-01-24 11:31 2024-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 - - - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it fails to modify QP to RTR, dip_ctx will not be attached. And d… - CVE-2024-57935 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
732 - - - In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existen… - CVE-2024-57933 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
733 - - - In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling … - CVE-2024-57931 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
734 - - - In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READ_ONCE() when accessing fgraph_array[] In __ftrace_return_to_handler(), a loop iterates over the fgraph_array[] el… - CVE-2024-57934 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
735 - - - In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and t… - CVE-2024-57932 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
736 - - - In the Linux kernel, the following vulnerability has been resolved: tracing: Have process_string() also allow arrays In order to catch a common bug where a TRACE_EVENT() TP_fast_assign() assigns an… - CVE-2024-57930 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
737 6.4 MEDIUM
Network 		- - The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitizat… CWE-79
Cross-site Scripting 		CVE-2025-0450 2025-01-21 20:15 2025-01-21 Show GitHub Exploit DB Packet Storm
738 - - - An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read acc… - CVE-2024-52973 2025-01-21 20:15 2025-01-21 Show GitHub Exploit DB Packet Storm
739 - - - An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function. - CVE-2024-43709 2025-01-21 20:15 2025-01-21 Show GitHub Exploit DB Packet Storm
740 - - - Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing … - CVE-2024-37284 2025-01-21 20:15 2025-01-21 Show GitHub Exploit DB Packet Storm