Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1311 5.3 警告
Network 		IBM Jazz Foundation IBM の Jazz Foundation における脆弱性 CWE-266
CWE-noinfo
CVE-2023-26280 2025-01-20 11:59 2023-02-21 Show GitHub Exploit DB Packet Storm
1312 4.3 警告
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-3215 2025-01-20 11:58 2024-05-2 Show GitHub Exploit DB Packet Storm
1313 9.8 緊急
Network 		Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3417 2025-01-20 11:58 2024-04-7 Show GitHub Exploit DB Packet Storm
1314 9.8 緊急
Network 		Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3422 2025-01-20 11:58 2024-04-7 Show GitHub Exploit DB Packet Storm
1315 9.8 緊急
Network 		Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3425 2025-01-20 11:58 2024-04-7 Show GitHub Exploit DB Packet Storm
1316 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-35985 2025-01-20 11:56 2024-04-22 Show GitHub Exploit DB Packet Storm
1317 7 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-47088 2025-01-20 11:54 2021-12-25 Show GitHub Exploit DB Packet Storm
1318 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1461 2025-01-20 11:52 2024-04-9 Show GitHub Exploit DB Packet Storm
1319 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1466 2025-01-20 11:52 2024-04-9 Show GitHub Exploit DB Packet Storm
1320 9.1 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における脆弱性 CWE-20
CWE-noinfo
CVE-2024-1638 2025-01-20 11:52 2024-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 8.8 HIGH
Network 		pdf-xchange pdf-xchange_editor PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of … CWE-125
Out-of-bounds Read 		CVE-2025-0909 2025-02-13 03:59 2025-02-12 Show GitHub Exploit DB Packet Storm
1162 8.8 HIGH
Network 		pdf-xchange pdf-xchange_editor PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of … CWE-125
Out-of-bounds Read 		CVE-2025-0908 2025-02-13 03:59 2025-02-12 Show GitHub Exploit DB Packet Storm
1163 8.8 HIGH
Network 		pdf-xchange pdf-xchange_editor PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of … CWE-125
Out-of-bounds Read 		CVE-2025-0907 2025-02-13 03:59 2025-02-12 Show GitHub Exploit DB Packet Storm
1164 8.8 HIGH
Network 		pdf-xchange pdf-xchange_editor PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of … CWE-125
Out-of-bounds Read 		CVE-2025-0906 2025-02-13 03:59 2025-02-12 Show GitHub Exploit DB Packet Storm
1165 5.4 MEDIUM
Network 		ibm applinx IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting 		CVE-2024-49791 2025-02-13 03:59 2025-02-6 Show GitHub Exploit DB Packet Storm
1166 - - - D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePassword parameter in the SetIPv6PppoeSettings module. - CVE-2025-25741 2025-02-13 03:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1167 - - - Koa is expressive middleware for Node.js using ES2017 async functions. Prior to versions 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3, Koa uses an evil regex to parse the `X-Forwarded-Proto` and `X-Forwa… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2025-25200 2025-02-13 03:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1168 - - - go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to `cng.TLS1PRF` don't release the key… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2025-25199 2025-02-13 03:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1169 - - - mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the … CWE-601
Open Redirect 		CVE-2025-25198 2025-02-13 03:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1170 3.5 LOW
Network 		- - A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $_… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1213 2025-02-13 03:15 2025-02-13 Show GitHub Exploit DB Packet Storm