Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
121 5.4 警告
Network 		themelooks enter addons themelooks の WordPress 用 enter addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3831 2025-01-30 17:12 2024-05-14 Show GitHub Exploit DB Packet Storm
122 5.4 警告
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3990 2025-01-30 17:12 2024-05-14 Show GitHub Exploit DB Packet Storm
123 4.3 警告
Network 		HasThemes HT Mega - Absolute Addons For Elementor HasThemes の WordPress 用 HT Mega - Absolute Addons For Elementor における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-4875 2025-01-30 17:12 2024-05-21 Show GitHub Exploit DB Packet Storm
124 5.4 警告
Network 		climaxthemes kata plus Climax Themes の WordPress 用 Kata Plus - Addons for Elementor - Widgets, Extensions and Templates におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-50501 2025-01-30 16:33 2024-10-28 Show GitHub Exploit DB Packet Storm
125 4.4 警告
Local 		coredns.io coredns The CoreDNS Authors の CoreDNS における脆弱性 CWE-Other
その他 		CVE-2022-2835 2025-01-30 16:23 2022-08-16 Show GitHub Exploit DB Packet Storm
126 6.1 警告
Network 		coredns.io coredns The CoreDNS Authors の CoreDNS におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2022-2837 2025-01-30 16:22 2022-08-16 Show GitHub Exploit DB Packet Storm
127 7.5 重要
Network 		coredns.io coredns The CoreDNS Authors の CoreDNS における脆弱性 CWE-noinfo
情報不足 		CVE-2023-28452 2025-01-30 16:19 2023-03-15 Show GitHub Exploit DB Packet Storm
128 7.5 重要
Network 		Apache Software Foundation
Fedora Project
日立		 uCosminexus Service Architect
Apache HTTP Server
uCosminexus Developer
Cosminexus HTTP Server
Fedora
uCosminexus Service Platform
uCosmi… 		Apache Software Foundation の Apache HTTP Server 等複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2024-27316 2025-01-30 15:28 2024-04-4 Show GitHub Exploit DB Packet Storm
129 - - OpenSSL Project OpenSSL OpenSSL におけるサービス運用妨害 (DoS) の脆弱性 (Security Advisory [8th April 2024]) - CVE-2024-2511 2025-01-30 15:22 2024-04-9 Show GitHub Exploit DB Packet Storm
130 9.8 緊急
Network 		Apache Software Foundation
日立		 Hitachi Application Server for Developers
uCosminexus Developer
Hitachi Web Server
uCosminexus Application Server Express
uCosminexus&nbs… 		Apache Software Foundation の Apache HTTP Server 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2024-38476 2025-01-30 15:19 2024-07-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 9, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 - - - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vuln… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2023-6195 2025-01-31 09:15 2025-01-31 Show GitHub Exploit DB Packet Storm
982 - - - pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Incorrect symlink checks on user specified dojos allows for users (admin not requ… CWE-200
CWE-61
Information Exposure
 UNIX Symbolic Link (Symlink) Following 		CVE-2025-24886 2025-01-31 08:15 2025-01-31 Show GitHub Exploit DB Packet Storm
983 - - - pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Missing access control on rendering custom (unprivileged) dojo pages causes abili… CWE-79
CWE-284
Cross-site Scripting
Improper Access Control 		CVE-2025-24885 2025-01-31 08:15 2025-01-31 Show GitHub Exploit DB Packet Storm
984 - - - A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of … - CVE-2025-0881 2025-01-31 07:15 2025-01-31 Show GitHub Exploit DB Packet Storm
985 - - - The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges. - CVE-2025-24099 2025-01-31 07:15 2025-01-31 Show GitHub Exploit DB Packet Storm
986 - - - In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify th… - CVE-2024-57276 2025-01-31 07:15 2025-01-28 Show GitHub Exploit DB Packet Storm
987 6.3 MEDIUM
Network 		- - A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The … CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0882 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
988 6.3 MEDIUM
Network 		- - A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0880 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
989 - - - Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PAC… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2025-0574 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm
990 - - - Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS… CWE-22
Path Traversal 		CVE-2025-0573 2025-01-31 06:15 2025-01-31 Show GitHub Exploit DB Packet Storm