Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 20, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 7.1 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2024-36931 2025-01-20 11:38 2024-04-29 Show GitHub Exploit DB Packet Storm
132 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-191
CWE-noinfo
CVE-2024-28945 2025-01-20 11:35 2024-04-9 Show GitHub Exploit DB Packet Storm
133 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-29982 2025-01-20 11:32 2024-04-9 Show GitHub Exploit DB Packet Storm
134 8.8 重要
Network 		マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-29984 2025-01-20 11:30 2024-04-9 Show GitHub Exploit DB Packet Storm
135 6.4 警告
Network 		Royal Elementor Addons Royal Elementor Addons and Templates Royal Elementor Addons の WordPress 用 Royal Elementor Addons and Templates におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-8482 2025-01-20 11:24 2024-10-8 Show GitHub Exploit DB Packet Storm
136 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-4121 2025-01-20 11:23 2024-04-24 Show GitHub Exploit DB Packet Storm
137 4.3 警告
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-4586 2025-01-20 11:23 2024-05-7 Show GitHub Exploit DB Packet Storm
138 5.4 警告
Network 		Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4379 2025-01-20 11:23 2024-05-31 Show GitHub Exploit DB Packet Storm
139 4.3 警告
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-4592 2025-01-20 11:23 2024-05-7 Show GitHub Exploit DB Packet Storm
140 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-4122 2025-01-20 11:23 2024-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
491 - - - Cross-Site Request Forgery (CSRF) vulnerability in Somethinkodd.com Development Team EmailShroud allows Reflected XSS.This issue affects EmailShroud: from n/a through 2.2.1. CWE-352
 Origin Validation Error 		CVE-2025-23456 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
492 - - - Cross-Site Request Forgery (CSRF) vulnerability in mastersoftwaresolutions WP VTiger Synchronization allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through 1.1.1. CWE-352
 Origin Validation Error 		CVE-2025-23455 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
493 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: fro… CWE-79
Cross-site Scripting 		CVE-2025-23453 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
494 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EditionGuard Dev Team EditionGuard for WooCommerce – eBook Sales with DRM allows Reflected XSS.Th… CWE-79
Cross-site Scripting 		CVE-2025-23452 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
495 - - - Cross-Site Request Forgery (CSRF) vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1. CWE-352
 Origin Validation Error 		CVE-2025-23445 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
496 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Scroll Top Advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2025-23444 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
497 - - - Cross-Site Request Forgery (CSRF) vulnerability in matias s Shockingly Big IE6 Warning allows Stored XSS.This issue affects Shockingly Big IE6 Warning: from n/a through 1.6.3. CWE-352
 Origin Validation Error 		CVE-2025-23442 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
498 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MarvinLabs WP PT-Viewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through 2.… CWE-79
Cross-site Scripting 		CVE-2025-23438 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
499 - - - Cross-Site Request Forgery (CSRF) vulnerability in Capa Wp-Scribd-List allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through 1.2. CWE-352
 Origin Validation Error 		CVE-2025-23436 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
500 - - - Cross-Site Request Forgery (CSRF) vulnerability in David Marcucci Password Protect Plugin for WordPress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through 0.… CWE-352
 Origin Validation Error 		CVE-2025-23435 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm