Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1461 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4117 2025-01-17 18:26 2024-04-24 Show GitHub Exploit DB Packet Storm
1462 5.4 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4275 2025-01-17 18:26 2024-05-14 Show GitHub Exploit DB Packet Storm
1463 9.8 緊急
Network 		Apache Software Foundation Apache OpenMeetings Apache Software Foundation の Apache OpenMeetings における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-54676 2025-01-17 18:26 2024-12-5 Show GitHub Exploit DB Packet Storm
1464 5.5 警告
Local 		クアルコム qam8775p ファームウェア
MSM8996AU ファームウェア
QCA6436 ファームウェア
fastconnect 6900 ファームウェア
qam8255p ファームウェア
fastconnect 7800 ファームウェア
QCA6310 ファームウェア 		複数のクアルコム製品における境界外読み取りに関する脆弱性 CWE-125
CWE-126
CVE-2023-43528 2025-01-17 18:25 2023-09-19 Show GitHub Exploit DB Packet Storm
1465 4.3 警告
Network 		Basixonline NEX-Forms Basixonline の WordPress 用 NEX-Forms における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1129 2025-01-17 18:25 2024-02-29 Show GitHub Exploit DB Packet Storm
1466 7.8 重要
Local 		クアルコム QCA6420 ファームウェア
QCA6436 ファームウェア
fastconnect 6900 ファームウェア
QCA1064 ファームウェア
fastconnect 7800 ファームウェア
fastconnect 6200 ファームウェア
AR8035 フ… 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-20
CWE-787
CVE-2024-21476 2025-01-17 18:25 2024-05-6 Show GitHub Exploit DB Packet Storm
1467 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. f1203 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の f1203 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2976 2025-01-17 18:25 2024-03-27 Show GitHub Exploit DB Packet Storm
1468 4.3 警告
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-3147 2025-01-17 18:25 2024-04-2 Show GitHub Exploit DB Packet Storm
1469 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4127 2025-01-17 18:25 2024-04-24 Show GitHub Exploit DB Packet Storm
1470 4.3 警告
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-4589 2025-01-17 18:25 2024-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 6.5 MEDIUM
Network 		- - The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.27.6 via the template_via_url() functi… New CWE-22
Path Traversal 		CVE-2025-0859 2025-02-6 19:15 2025-02-6 Show GitHub Exploit DB Packet Storm
62 - - - Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted da… New CWE-88
Argument Injection 		CVE-2025-24845 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
63 - - - NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system w… New CWE-476
 NULL Pointer Dereference 		CVE-2025-24483 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
64 - - - Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product … New CWE-120
Classic Buffer Overflow 		CVE-2025-23236 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
65 - - - Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of t… New CWE-422
CVE-2025-22894 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
66 - - - Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of t… New CWE-422
CVE-2025-20094 2025-02-6 17:15 2025-02-6 Show GitHub Exploit DB Packet Storm
67 - - - An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector. Update - CVE-2025-24527 2025-02-6 17:15 2025-01-30 Show GitHub Exploit DB Packet Storm
68 - - - Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system wher… New CWE-250
 Execution with Unnecessary Privileges 		CVE-2025-22890 2025-02-6 16:15 2025-02-6 Show GitHub Exploit DB Packet Storm
69 - - - Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX … New CWE-798
 Use of Hard-coded Credentials 		CVE-2024-51547 2025-02-6 14:15 2025-02-6 Show GitHub Exploit DB Packet Storm
70 6.5 MEDIUM
Network 		- - IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment … New CWE-22
Path Traversal 		CVE-2025-0799 2025-02-6 10:15 2025-02-6 Show GitHub Exploit DB Packet Storm