Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
121 6.6 警告
Physics
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server&…
ワイヤレス広域ネットワーク サービス (WwanSvc) の特権昇格の脆弱性 New CWE-122
CWE-noinfo
CVE-2024-49081 2025-01-10 14:20 2024-12-10 Show GitHub Exploit DB Packet Storm
122 5.5 警告
Local
マイクロソフト Microsoft SharePoint Server
Microsoft 365 Apps
Microsoft Word
Microsoft SharePoint Enterprise Server
Microsoft Office
Microsoft Office のリモート コードが実行される脆弱性 New CWE-125
CWE-noinfo
CVE-2024-49065 2025-01-10 14:17 2024-12-10 Show GitHub Exploit DB Packet Storm
123 8.4 重要
Local
マイクロソフト Microsoft/Muzic Muzic のリモートでコードが実行される脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2024-49063 2025-01-10 14:11 2024-12-10 Show GitHub Exploit DB Packet Storm
124 5.5 警告
Local
マイクロソフト Microsoft Intune Mobile Application Management Microsoft Intune for Android モバイル アプリケーション管理の改ざんの脆弱性 New CWE-284
CWE-noinfo
CVE-2024-30059 2025-01-10 13:49 2024-05-14 Show GitHub Exploit DB Packet Storm
125 5.4 警告
Network
マイクロソフト Azure Migrate Azure Migrate のクロスサイト スクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-30053 2025-01-10 13:43 2024-05-14 Show GitHub Exploit DB Packet Storm
126 3.3
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window…
Windows Remote Access Connection Manager の情報漏えいの脆弱性 New CWE-125
CWE-noinfo
CVE-2024-26217 2025-01-10 12:30 2024-04-9 Show GitHub Exploit DB Packet Storm
127 7.2 重要
Network
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2012
DHCP Server Service のリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-26202 2025-01-10 12:26 2024-04-9 Show GitHub Exploit DB Packet Storm
128 6.4 警告
Adjacent
マイクロソフト Azure Migrate Azure Migrate のリモートでコードが実行される脆弱性 New CWE-285
CWE-noinfo
CVE-2024-26193 2025-01-10 12:22 2024-04-9 Show GitHub Exploit DB Packet Storm
129 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Window…
Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 New CWE-125
CWE-noinfo
CVE-2024-30025 2025-01-10 12:20 2024-05-14 Show GitHub Exploit DB Packet Storm
130 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window…
セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-125
CWE-noinfo
CVE-2024-26175 2025-01-10 12:19 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 - - - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1. New - CVE-2024-13254 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
232 - - - Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0. New - CVE-2024-13253 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
233 - - - Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1. New - CVE-2024-13251 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
234 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6. New - CVE-2024-13250 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
235 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.0 before 6.0.3. New - CVE-2024-13244 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
236 - - - Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1. New - CVE-2024-13243 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
237 7.8 HIGH
Local
qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qam8295p_firmware
qca6574au_firmware
qca6696_firmware
qcm8550_firmware
qcs6490_firmware
qcs8550_firmware
video_collaboratio…
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, Update CWE-787
 Out-of-bounds Write
CVE-2024-33041 2025-01-11 02:15 2025-01-6 Show GitHub Exploit DB Packet Storm
238 7.8 HIGH
Local
qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qam8295p_firmware
qca6574au_firmware
qca6696_firmware
qcm8550_firmware
qcs6490_firmware
qcs8550_firmware
video_collaboratio…
Memory corruption while invoking IOCTL calls to unmap the DMA buffers. Update CWE-416
 Use After Free
CVE-2024-33055 2025-01-11 02:01 2025-01-6 Show GitHub Exploit DB Packet Storm
239 7.8 HIGH
Local
qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qcm8550_firmware
qcs8550_firmware
sg8275p_firmware
sm8550p_firmware
snapdragon_8_gen_2_mobile_firmware
snapdragon_8_gen_3_mobi…
Memory corruption while processing frame command IOCTL calls. Update CWE-416
 Use After Free
CVE-2024-33059 2025-01-11 01:53 2025-01-6 Show GitHub Exploit DB Packet Storm
240 5.5 MEDIUM
Local
qualcomm qcs8550_firmware
sw5100_firmware
sw5100p_firmware
wcn3660b_firmware
wcn3680b_firmware
wcn3980_firmware
wcn3988_firmware
wsa8830_firmware
wsa8835_firmware
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. Update CWE-125
Out-of-bounds Read
CVE-2024-33061 2025-01-11 01:49 2025-01-6 Show GitHub Exploit DB Packet Storm