Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1171 9.8 緊急
Network
Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-3421 2025-01-20 18:24 2024-04-7 Show GitHub Exploit DB Packet Storm
1172 6.1 警告
Network
Argie Online courseware Argie の Online courseware におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3428 2025-01-20 18:24 2024-04-7 Show GitHub Exploit DB Packet Storm
1173 5.4 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3743 2025-01-20 18:24 2024-05-2 Show GitHub Exploit DB Packet Storm
1174 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. ac500 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の ac500 ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2024-3908 2025-01-20 18:24 2024-04-17 Show GitHub Exploit DB Packet Storm
1175 5.4 警告
Network
Jenkins プロジェクト OWASP Dependency-Check Jenkins プロジェクトの Jenkins 用 OWASP Dependency-Check におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-28153 2025-01-20 18:22 2024-03-6 Show GitHub Exploit DB Packet Storm
1176 5.4 警告
Network
Nextend Nextend Social Login and Register Nextend の WordPress 用 Nextend Social Login and Register におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1775 2025-01-20 18:17 2024-03-2 Show GitHub Exploit DB Packet Storm
1177 4.8 警告
Network
Joseph LoPreste Restaurant Solutions - Checklist Joseph LoPreste の WordPress 用 Restaurant Solutions - Checklist におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1977 2025-01-20 18:17 2024-02-29 Show GitHub Exploit DB Packet Storm
1178 4.3 警告
Network
kaliforms kali forms kaliforms の WordPress 用 kali forms における脆弱性 CWE-noinfo
情報不足
CVE-2024-1217 2025-01-20 18:10 2024-02-29 Show GitHub Exploit DB Packet Storm
1179 4.6 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2091 2025-01-20 18:10 2024-03-28 Show GitHub Exploit DB Packet Storm
1180 5.4 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2792 2025-01-20 18:10 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 4.3 MEDIUM
Network
- - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2024-38316 2025-02-6 08:15 2025-02-6 Show GitHub Exploit DB Packet Storm
362 - - - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. Thi… - CVE-2025-23419 2025-02-6 05:15 2025-02-6 Show GitHub Exploit DB Packet Storm
363 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local user with minimal privi… CWE-269
 Improper Privilege Management
CVE-2025-24805 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
364 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentat… CWE-1287
 Improper Validation of Specified Type of Input
CVE-2025-24804 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
365 - - - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentat… CWE-79
Cross-site Scripting
CVE-2025-24803 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
366 - - - CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Using a specially crafted file, a user could potentially upload a file containing code that when executed … CWE-79
Cross-site Scripting
CVE-2025-24372 2025-02-6 04:15 2025-02-6 Show GitHub Exploit DB Packet Storm
367 - - - An issue was discovered in NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic/radio endpoint is vulnerable to XSS via the 2.4 GHz and 5 GHz name parameters, allowing an attacker t… - CVE-2024-53943 2025-02-6 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
368 5.4 MEDIUM
Network
qodeinteractive qi_addons_for_elementor The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter in all versions up to, and including, 1.8.7 due to insufficient input sanitiza… CWE-79
Cross-site Scripting
CVE-2024-13699 2025-02-6 03:33 2025-02-4 Show GitHub Exploit DB Packet Storm
369 - - - When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluat… CWE-125
Out-of-bounds Read
CVE-2025-24497 2025-02-6 03:15 2025-02-6 Show GitHub Exploit DB Packet Storm
370 - - - When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization. Note: Software versions which h… CWE-787
 Out-of-bounds Write
CVE-2025-24326 2025-02-6 03:15 2025-02-6 Show GitHub Exploit DB Packet Storm