Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1371 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-12851 2025-01-20 11:04 2024-12-20 Show GitHub Exploit DB Packet Storm
1372 5.4 警告
Network 		Wpmet ElementsKit Elementor addons Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10091 2025-01-20 11:04 2024-10-26 Show GitHub Exploit DB Packet Storm
1373 5.4 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1392 2025-01-20 10:53 2024-03-13 Show GitHub Exploit DB Packet Storm
1374 7.2 重要
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-11006 2025-01-20 10:53 2024-11-12 Show GitHub Exploit DB Packet Storm
1375 7.2 重要
Network 		Ivanti cloud services appliance Ivanti の cloud services appliance における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-11773 2025-01-20 10:53 2024-12-10 Show GitHub Exploit DB Packet Storm
1376 7.8 重要
Local 		Huawei curiem-wfg9b ファームウェア Huawei の curiem-wfg9b ファームウェアにおける例外的な状態のチェックに関する脆弱性 CWE-754
CWE-754
CVE-2023-52710 2025-01-20 10:48 2024-05-28 Show GitHub Exploit DB Packet Storm
1377 7.8 重要
Local 		Huawei curiem-wfg9b ファームウェア Huawei の curiem-wfg9b ファームウェアにおける脆弱性 CWE-284
CWE-noinfo
CVE-2023-52712 2025-01-20 10:48 2024-05-28 Show GitHub Exploit DB Packet Storm
1378 4.3 警告
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-0588 2025-01-20 10:47 2024-04-9 Show GitHub Exploit DB Packet Storm
1379 7.2 重要
Network 		Ivanti connect secure Ivanti の connect secure における引数の挿入または変更に関する脆弱性 CWE-88
CWE-88
CVE-2024-11633 2025-01-20 10:47 2024-12-10 Show GitHub Exploit DB Packet Storm
1380 5.4 警告
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-1407 2025-01-20 10:47 2024-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 - - - Improper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow an authenticated user to potentially enable denial of service via network access. CWE-20
 Improper Input Validation  		CVE-2024-38307 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1092 - - - Improper access control in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-284
Improper Access Control 		CVE-2024-37355 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1093 - - - Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local… CWE-427
 Uncontrolled Search Path Element 		CVE-2024-36291 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1094 - - - Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local acc… CWE-362
Race Condition 		CVE-2024-36285 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1095 - - - Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-36283 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1096 - - - Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-36280 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1097 - - - Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial o… CWE-787
 Out-of-bounds Write 		CVE-2024-36274 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1098 - - - Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access. CWE-362
Race Condition 		CVE-2024-36262 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1099 - - - Incorrect default permissions for some Intel(R) DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-276
Incorrect Default Permissions  		CVE-2024-32942 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1100 - - - NULL pointer dereference for some Intel(R) MLC software before version v3.11b may allow an authenticated user to potentially enable denial of service via local access. CWE-476
 NULL Pointer Dereference 		CVE-2024-32941 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm