Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1371 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-12851 2025-01-20 11:04 2024-12-20 Show GitHub Exploit DB Packet Storm
1372 5.4 警告
Network 		Wpmet ElementsKit Elementor addons Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10091 2025-01-20 11:04 2024-10-26 Show GitHub Exploit DB Packet Storm
1373 5.4 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1392 2025-01-20 10:53 2024-03-13 Show GitHub Exploit DB Packet Storm
1374 7.2 重要
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-11006 2025-01-20 10:53 2024-11-12 Show GitHub Exploit DB Packet Storm
1375 7.2 重要
Network 		Ivanti cloud services appliance Ivanti の cloud services appliance における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2024-11773 2025-01-20 10:53 2024-12-10 Show GitHub Exploit DB Packet Storm
1376 7.8 重要
Local 		Huawei curiem-wfg9b ファームウェア Huawei の curiem-wfg9b ファームウェアにおける例外的な状態のチェックに関する脆弱性 CWE-754
CWE-754
CVE-2023-52710 2025-01-20 10:48 2024-05-28 Show GitHub Exploit DB Packet Storm
1377 7.8 重要
Local 		Huawei curiem-wfg9b ファームウェア Huawei の curiem-wfg9b ファームウェアにおける脆弱性 CWE-284
CWE-noinfo
CVE-2023-52712 2025-01-20 10:48 2024-05-28 Show GitHub Exploit DB Packet Storm
1378 4.3 警告
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-0588 2025-01-20 10:47 2024-04-9 Show GitHub Exploit DB Packet Storm
1379 7.2 重要
Network 		Ivanti connect secure Ivanti の connect secure における引数の挿入または変更に関する脆弱性 CWE-88
CWE-88
CVE-2024-11633 2025-01-20 10:47 2024-12-10 Show GitHub Exploit DB Packet Storm
1380 5.4 警告
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-1407 2025-01-20 10:47 2024-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1181 - - - A Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85 allows attackers to execute arbitrary code via a crafted input that exceeds the buffer size. - CVE-2024-53311 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1182 - - - A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a specially crafted file is passed to the -ff parameter. … - CVE-2024-53310 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1183 - - - A stack-based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when an overly long string is passed to the "-f" parameter. This can lead to memory c… - CVE-2024-53309 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1184 - - - ZF Roll Stability Support Plus (RSSPlus) is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remote… CWE-305
 Authentication Bypass by Primary Weakness 		CVE-2024-12054 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1185 - - - An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, loc… - CVE-2023-34406 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1186 - - - Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an… - CVE-2023-34404 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1187 - - - Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins and get access to internal network. A race condition can be acquired and attacker… - CVE-2023-34403 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1188 - - - Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size c… - CVE-2023-34401 2025-02-14 08:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1189 - - - The Mojave Inverter uses the GET method for sensitive information. CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-26473 2025-02-14 07:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1190 - - - An attacker may modify the URL to discover sensitive information about the target network. CWE-200
Information Exposure 		CVE-2025-25281 2025-02-14 07:15 2025-02-14 Show GitHub Exploit DB Packet Storm