Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 30, 2025, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
121 7.8 重要
Local
マイクロソフト Microsoft Windows 8.1
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows RT 8.1
Microsoft Windows Server …
複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性 Update CWE-noinfo
情報不足
CVE-2019-0895 2025-01-29 18:00 2019-05-14 Show GitHub Exploit DB Packet Storm
122 7.8 重要
Local
マイクロソフト Microsoft Windows 8.1
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows RT 8.1
Microsoft Windows Server …
複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性 Update CWE-noinfo
情報不足
CVE-2019-0896 2025-01-29 18:00 2019-05-14 Show GitHub Exploit DB Packet Storm
123 7.8 重要
Local
マイクロソフト Microsoft Windows 8.1
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows RT 8.1
Microsoft Windows Server …
複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性 Update CWE-noinfo
情報不足
CVE-2019-0897 2025-01-29 18:00 2019-05-14 Show GitHub Exploit DB Packet Storm
124 7.8 重要
Local
マイクロソフト Microsoft Windows 8.1
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows RT 8.1
Microsoft Windows Server …
複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性 Update CWE-noinfo
情報不足
CVE-2019-0898 2025-01-29 18:00 2019-05-14 Show GitHub Exploit DB Packet Storm
125 7.8 重要
Local
マイクロソフト Microsoft Windows 8.1
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows RT 8.1
Microsoft Windows Server …
複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性 Update CWE-noinfo
情報不足
CVE-2019-0899 2025-01-29 18:00 2019-05-14 Show GitHub Exploit DB Packet Storm
126 9.8 緊急
Network
miniOrange Miniorange OTP Verification with Firebase miniOrange の WordPress 用 Miniorange OTP Verification with Firebase におけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
CWE-639
CVE-2024-9862 2025-01-29 16:50 2024-10-17 Show GitHub Exploit DB Packet Storm
127 2.3
Local
Lenovo ThinkSystem SR670 V2 ファームウェア Lenovo の ThinkSystem SR670 V2 ファームウェアにおける脆弱性 New CWE-1269
CWE-Other
CVE-2024-23591 2025-01-29 16:42 2024-02-16 Show GitHub Exploit DB Packet Storm
128 8.8 重要
Network
ZTE MF258K PRO ファームウェア ZTE の MF258K PRO ファームウェアにおける OS コマンドインジェクションの脆弱性 New CWE-20
CWE-78
CVE-2024-22065 2025-01-29 16:38 2024-10-29 Show GitHub Exploit DB Packet Storm
129 7.8 重要
Local
ultralytics yolov3 Ultralytics の YOLOv3 における信頼できないデータのデシリアライゼーションに関する脆弱性 Update CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2021-31681 2025-01-29 16:33 2021-04-23 Show GitHub Exploit DB Packet Storm
130 3.3
Local
オープンCADフォーマット評議会 SXF 共通ライブラリ SXF共通ライブラリにおける入力データの取り扱い不備 New CWE-Other
その他
CVE-2025-24336 2025-01-29 16:32 2025-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 - - - In the Linux kernel, the following vulnerability has been resolved: ovl: support encoding fid from inode with no alias Dmitry Safonov reported that a WARN_ON() assertion can be trigered by userspac… - CVE-2025-21654 2025-01-25 01:15 2025-01-19 Show GitHub Exploit DB Packet Storm
812 5.3 MEDIUM
Network
- - A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP Header Handler. The manipulation of the… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2025-0697 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
813 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacte… - CVE-2024-9499 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
814 - - - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version 4.0.0-beta.18 and prior to 4.0.0-beta.253, a vulnerability in the execution of … CWE-78
OS Command 
CVE-2025-22605 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
815 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted inst… - CVE-2024-9498 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
816 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted in… - CVE-2024-9497 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
817 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted … - CVE-2024-9496 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
818 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted i… - CVE-2024-9495 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
819 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the  CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted … - CVE-2024-9494 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm
820 - - - DLL hijacking vulnerabilities, caused by an uncontrolled search path in the  ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer. - CVE-2024-9493 2025-01-25 00:15 2025-01-25 Show GitHub Exploit DB Packet Storm