Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1291 8.8 重要
Network 		マイクロソフト Microsoft SQL Server SQL Server Native Client OLE DB プロバイダーのリモート コード実行に対する脆弱性 CWE-416
CWE-noinfo
CVE-2024-21332 2025-01-20 13:47 2024-07-9 Show GitHub Exploit DB Packet Storm
1292 5.3 警告
Network 		Debian
レッドハット
Fedora Project
Net-SNMP		 Red Hat Enterprise Linux for IBM z Systems
Debian GNU/Linux
enterprise linux for arm 64
enterprise linux for arm&nb… 		Net-SNMP の Net-SNMP 等複数ベンダの製品における脆弱性 CWE-20
CWE-noinfo
CVE-2022-24806 2025-01-20 13:28 2022-02-10 Show GitHub Exploit DB Packet Storm
1293 6.5 警告
Network 		Debian
レッドハット
Fedora Project
Net-SNMP		 Red Hat Enterprise Linux for IBM z Systems
Debian GNU/Linux
enterprise linux for arm 64
enterprise linux for arm&nb… 		Net-SNMP の Net-SNMP 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2022-24809 2025-01-20 13:27 2022-02-10 Show GitHub Exploit DB Packet Storm
1294 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-57799 2025-01-20 12:28 2024-12-8 Show GitHub Exploit DB Packet Storm
1295 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56551 2025-01-20 12:25 2024-11-21 Show GitHub Exploit DB Packet Storm
1296 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-55642 2025-01-20 12:23 2024-12-10 Show GitHub Exploit DB Packet Storm
1297 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0837 2025-01-20 12:21 2024-04-6 Show GitHub Exploit DB Packet Storm
1298 5.4 警告
Network 		SiteOrigin siteorigin widgets bundle SiteOrigin の WordPress 用 siteorigin widgets bundle におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1058 2025-01-20 12:21 2024-02-29 Show GitHub Exploit DB Packet Storm
1299 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1428 2025-01-20 12:21 2024-04-6 Show GitHub Exploit DB Packet Storm
1300 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1464 2025-01-20 12:21 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 - - - Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiti… - CVE-2024-57004 2025-02-4 04:15 2025-02-4 Show GitHub Exploit DB Packet Storm
622 - - - Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial. - CVE-2024-57510 2025-02-4 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
623 - - - The specific component in Celk Saude 3.1.252.1 that processes user input and returns error messages to the client is vulnerable due to improper validation or sanitization of the "erro" parameter. Thi… - CVE-2024-48761 2025-02-4 04:15 2025-01-30 Show GitHub Exploit DB Packet Storm
624 - - - rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a l… CWE-416
 Use After Free 		CVE-2025-24898 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
625 - - - PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping. - CVE-2024-57967 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
626 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-54840. Reason: This candidate is a reservation duplicate of CVE-2024-54840. Notes: All CVE users should reference CVE-2024-5484… - CVE-2024-57362 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
627 - - - A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php. - CVE-2024-57175 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
628 - - - PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection. - CVE-2024-54840 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
629 - - - An issue was discovered on NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic/radio endpoint is vulnerable to command injection via the 2.4 GHz and 5 GHz name parameters, allowing… - CVE-2024-53942 2025-02-4 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
630 6.3 MEDIUM
Network 		- - A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file staffview.php. The manipulation of the arg… - CVE-2025-0950 2025-02-4 03:15 2025-02-2 Show GitHub Exploit DB Packet Storm