Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1271 6.7 警告
Local 		フォーティネット FortiAnalyzer-BigData
FortiAnalyzer
FortiManager 		複数のフォーティネット製品における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-32118 2025-01-20 14:53 2024-11-12 Show GitHub Exploit DB Packet Storm
1272 6.7 警告
Local 		フォーティネット FortiManager フォーティネットの FortiManager におけるコードインジェクションの脆弱性 CWE-1336
CWE-94
CVE-2023-47542 2025-01-20 14:50 2023-11-6 Show GitHub Exploit DB Packet Storm
1273 8.8 重要
Network 		マイクロソフト Microsoft SQL Server SQL Server Native Client OLE DB プロバイダーのリモート コード実行に対する脆弱性 CWE-122
CWE-noinfo
CVE-2024-21425 2025-01-20 14:46 2024-07-9 Show GitHub Exploit DB Packet Storm
1274 8.8 重要
Network 		マイクロソフト Microsoft SQL Server SQL Server Native Client OLE DB プロバイダーのリモート コード実行に対する脆弱性 CWE-122
CWE-noinfo
CVE-2024-21331 2025-01-20 14:38 2024-07-9 Show GitHub Exploit DB Packet Storm
1275 8.8 重要
Network 		マイクロソフト Microsoft SQL Server SQL Server Native Client OLE DB プロバイダーのリモート コード実行に対する脆弱性 CWE-122
CWE-noinfo
CVE-2024-21317 2025-01-20 14:24 2024-07-9 Show GitHub Exploit DB Packet Storm
1276 8.8 重要
Network 		Wpmet ElementsKit Elementor addons Wpmet の WordPress 用 ElementsKit Elementor addons における脆弱性 CWE-Other
その他 		CVE-2024-2047 2025-01-20 14:10 2024-03-30 Show GitHub Exploit DB Packet Storm
1277 6.1 警告
Network 		Rock Lobster Contact Form 7 Rock Lobster の WordPress 用 Contact Form 7 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2242 2025-01-20 14:10 2024-03-13 Show GitHub Exploit DB Packet Storm
1278 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2655 2025-01-20 14:10 2024-04-10 Show GitHub Exploit DB Packet Storm
1279 5.4 警告
Network 		Wpmet ElementsKit Elementor addons Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2803 2025-01-20 14:09 2024-04-4 Show GitHub Exploit DB Packet Storm
1280 8.8 重要
Network 		oretnom23 computer laboratory management system oretnom23 の computer laboratory management system における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3316 2025-01-20 14:09 2024-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
421 4.3 MEDIUM
Network 		wpjobportal wp_job_portal The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 v… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-13425 2025-02-6 01:08 2025-02-1 Show GitHub Exploit DB Packet Storm
422 4.3 MEDIUM
Network 		wpjobportal wp_job_portal The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 v… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-13429 2025-02-6 01:05 2025-02-1 Show GitHub Exploit DB Packet Storm
423 5.3 MEDIUM
Network 		wpjobportal wp_job_portal The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.6 v… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-13428 2025-02-6 01:05 2025-02-1 Show GitHub Exploit DB Packet Storm
424 7.8 HIGH
Local 		qualcomm fastconnect_6200_firmware
fastconnect_7800_firmware
qca6391_firmware
qcm6125_firmware
qcs6125_firmware
qcs7230_firmware
qcs8250_firmware
video_collaboration_vc1_platform_firmware… 		Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. CWE-129
 Improper Validation of Array Index 		CVE-2024-49843 2025-02-6 01:02 2025-02-4 Show GitHub Exploit DB Packet Storm
425 7.8 HIGH
Local 		qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qcc2073_firmware
qcc2076_firmware
sc8380xp_firmware
wcd9380_firmware
wcd9385_firmware
wsa8840_firmware
wsa8845_firmware
… 		Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-49840 2025-02-6 01:02 2025-02-4 Show GitHub Exploit DB Packet Storm
426 9.8 CRITICAL
Network 		qualcomm ar8035_firmware
csr8811_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
immersive_home_214_firmware
immersive_home_216_firmware
immersive_h… 		Memory corruption during management frame processing due to mismatch in T2LM info element. CWE-125
Out-of-bounds Read 		CVE-2024-49839 2025-02-6 01:02 2025-02-4 Show GitHub Exploit DB Packet Storm
427 7.8 HIGH
Local 		qualcomm qam8255p_firmware
qam8295p_firmware
qam8620p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qamsrv1m_firmware
qca6574au_firmware
qca6595_firmware
qca6595au_… 		Memory corruption while reading CPU state data during guest VM suspend. CWE-129
 Improper Validation of Array Index 		CVE-2024-49837 2025-02-6 01:02 2025-02-4 Show GitHub Exploit DB Packet Storm
428 7.5 HIGH
Network 		qualcomm ar8035_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
mdm9628_firmware
qam8255p_firmwa… 		Information disclosure while parsing the OCI IE with invalid length. CWE-125
Out-of-bounds Read 		CVE-2024-49838 2025-02-6 01:02 2025-02-4 Show GitHub Exploit DB Packet Storm
429 7.8 HIGH
Local 		qualcomm csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
qam825… 		Memory corruption while power-up or power-down sequence of the camera sensor. CWE-129
 Improper Validation of Array Index 		CVE-2024-49834 2025-02-6 01:02 2025-02-4 Show GitHub Exploit DB Packet Storm
430 7.8 HIGH
Local 		qualcomm fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
qam8255p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qamsrv1m_firmware
qca6595… 		Memory corruption can occur in the camera when an invalid CID is used. CWE-129
 Improper Validation of Array Index 		CVE-2024-49833 2025-02-6 01:01 2025-02-4 Show GitHub Exploit DB Packet Storm