Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1381 8.8 重要
Network
Fedora Project
レッドハット
Debian
Net-SNMP
Red Hat Enterprise Linux for Power
 little endian - Extended Update Support
Red Hat Enterprise Linux for IBM …
Net-SNMP の Net-SNMP 等複数ベンダの製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2022-24805 2025-01-20 10:40 2022-02-10 Show GitHub Exploit DB Packet Storm
1382 6.5 警告
Network
Fedora Project
レッドハット
Debian
Net-SNMP
Red Hat Enterprise Linux for Power
 little endian - Extended Update Support
Red Hat Enterprise Linux for IBM …
Net-SNMP の Net-SNMP 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2022-24808 2025-01-20 10:40 2022-02-10 Show GitHub Exploit DB Packet Storm
1383 8.8 重要
Local
paddlepaddle paddlepaddle paddlepaddle における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2024-0815 2025-01-20 10:40 2024-03-7 Show GitHub Exploit DB Packet Storm
1384 6.1 警告
Network
Ivanti connect secure
policy secure
Ivanti の connect secure および policy secure におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-11004 2025-01-20 10:40 2024-11-12 Show GitHub Exploit DB Packet Storm
1385 7.8 重要
Local
アドビシステムズ Adobe Substance 3D Stager アドビの Adobe Substance 3D Stager における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2025-21128 2025-01-20 10:19 2025-01-14 Show GitHub Exploit DB Packet Storm
1386 7.8 重要
Local
アドビシステムズ Adobe Substance 3D Stager アドビの Adobe Substance 3D Stager における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-21131 2025-01-20 10:19 2025-01-14 Show GitHub Exploit DB Packet Storm
1387 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他
CVE-2023-52580 2025-01-20 10:00 2023-09-15 Show GitHub Exploit DB Packet Storm
1388 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2024-35980 2025-01-20 10:00 2024-04-10 Show GitHub Exploit DB Packet Storm
1389 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2024-53166 2025-01-20 10:00 2024-11-29 Show GitHub Exploit DB Packet Storm
1390 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2024-53170 2025-01-20 10:00 2024-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1031 6.4 MEDIUM
Network
- - The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.11.2 due… CWE-79
Cross-site Scripting
CVE-2024-13735 2025-02-14 19:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1032 - - - An issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access controls allowed li-admin users to access sensitive information about AgentX Manager in a Logpoint de… - CVE-2025-26789 2025-02-14 17:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1033 - - - Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in MarketingFire Widget Options allows OS Command Injection.This issue affects Widget Options: from n… CWE-77
Command Injection
CVE-2025-22630 2025-02-14 16:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1034 6.5 MEDIUM
Network
- - The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ and 'UniqueID' parameter in all versions up to, and including, 1.8.12 due to … CWE-79
Cross-site Scripting
CVE-2024-9601 2025-02-14 16:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1035 - - - app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search. - CVE-2024-57969 2025-02-14 16:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1036 - - - The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting att… - CVE-2024-7052 2025-02-14 15:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1037 5.4 MEDIUM
Network
- - The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all… CWE-285
Improper Authorization
CVE-2024-13692 2025-02-14 15:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1038 5.9 MEDIUM
Network
- - The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all v… CWE-200
Information Exposure
CVE-2024-13641 2025-02-14 15:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1039 - - - The Sensly Online Presence WordPress plugin through 0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting … - CVE-2024-13493 2025-02-14 15:15 2025-02-14 Show GitHub Exploit DB Packet Storm
1040 - - - Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to caus… CWE-125
Out-of-bounds Read
CVE-2025-23406 2025-02-14 14:15 2025-02-14 Show GitHub Exploit DB Packet Storm