Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1491	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2024-56572	2025-01-17 17:45	2024-10-12	Show	GitHub Exploit DB Packet Storm

1492	8.1	重要 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows 10 Microsoft Windows Server 2019 Microsoft Windows Server&…	Windows リモートデスクトップサービスのリモートでコードが実行される脆弱性	CWE-362 CWE-416 CWE-591	CVE-2024-49132	2025-01-17 17:43	2024-12-10	Show	GitHub Exploit DB Packet Storm

1493	8.8	重要 Network	マイクロソフト	Microsoft ODBC Driver Microsoft SQL Server	SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2024-28941	2025-01-17 17:41	2024-04-9	Show	GitHub Exploit DB Packet Storm

1494	7.5	重要 Network	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows Server 2022 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microso…	Windows リモートデスクトップゲートウェイ (RD ゲートウェイ) のサービス拒否の脆弱性	CWE-362 CWE-400	CVE-2024-49129	2025-01-17 17:39	2024-12-10	Show	GitHub Exploit DB Packet Storm

1495	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2024-53205	2025-01-17 17:37	2024-11-4	Show	GitHub Exploit DB Packet Storm

1496	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2024-53210	2025-01-17 17:37	2024-11-26	Show	GitHub Exploit DB Packet Storm

1497	5.5	警告 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2024-35828	2025-01-17 17:32	2024-02-5	Show	GitHub Exploit DB Packet Storm

1498	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows 10 Microsoft Windows Server 2019 Microsoft Windows Server&…	Windows Cloud Files Mini Filter ドライバーの特権の昇格の脆弱性	CWE-820 CWE-noinfo	CVE-2024-49114	2025-01-17 17:31	2024-12-10	Show	GitHub Exploit DB Packet Storm

1499	5.5	警告 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2024-27388	2025-01-17 17:29	2024-03-1	Show	GitHub Exploit DB Packet Storm

1500	7.8	重要 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-26689	2025-01-17 17:21	2024-02-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
41	9.8	CRITICAL Network	qualcomm	ar8035_firmware csr8811_firmware fastconnect_6700_firmware fastconnect_6900_firmware fastconnect_7800_firmware immersive_home_214_firmware immersive_home_216_firmware immersive_h…	Memory corruption while parsing the ML IE due to invalid frame content. New	CWE-129 Improper Validation of Array Index	CVE-2024-45569	2025-02-5 22:55	2025-02-4	Show	GitHub Exploit DB Packet Storm

42	-		-	-	ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat. New	-	CVE-2024-9097	2025-02-5 22:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

43	-		-	-	An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-2878	2025-02-5 22:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

44	6.4	MEDIUM Network	-	-	IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to stored cross-site scripting… New	CWE-79 Cross-site Scripting	CVE-2024-52365	2025-02-5 21:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

45	5.4	MEDIUM Network	-	-	IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vu… New	CWE-79 Cross-site Scripting	CVE-2024-52364	2025-02-5 21:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

46	4.3	MEDIUM Network	-	-	IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows restricting access to organizationa… New	CWE-266 Incorrect Privilege Assignment	CVE-2024-49348	2025-02-5 21:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

47	-		-	-	An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible… New	CWE-862 Missing Authorization	CVE-2024-3976	2025-02-5 21:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

48	-		-	-	An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of M… New	CWE-407 Inefficient Algorithmic Complexity	CVE-2024-9631	2025-02-5 20:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

49	-		-	-	An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLa… New	CWE-1023	CVE-2024-5528	2025-02-5 20:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

50	7.1	HIGH Network	-	-	IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo… New	CWE-611 XXE	CVE-2024-49352	2025-02-5 20:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed