Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	6.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	ワイヤレス広域ネットワークサービス (WwanSvc) の特権昇格の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49101	2025-01-17 15:52	2024-12-10	Show	GitHub Exploit DB Packet Storm

1552	5.6	警告 Network	Hitachi Energy	FOXMAN-UN UNEM	Hitachi Energy の FOXMAN-UN および UNEM における過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2024-28022	2025-01-17 15:50	2024-06-11	Show	GitHub Exploit DB Packet Storm

1553	7.1	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-47191	2025-01-17 15:49	2021-10-18	Show	GitHub Exploit DB Packet Storm

1554	6.8	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	Windows モバイルブロードバンドドライバーの特権昇格の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49092	2025-01-17 15:49	2024-12-10	Show	GitHub Exploit DB Packet Storm

1555	7.2	重要 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Windows Server 2012 Microso…	Windows ドメインネームサービスのリモートでコードが実行される脆弱性	CWE-591 CWE-noinfo	CVE-2024-49091	2025-01-17 15:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

1556	7.4	重要 Network	Hitachi Energy	FOXMAN-UN UNEM foxman un	複数の Hitachi Energy 製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2024-28021	2025-01-17 15:47	2024-06-11	Show	GitHub Exploit DB Packet Storm

1557	7.2	重要 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Window…	Windows ルーティングとリモートアクセスサービス (RRAS) のリモートでコードが実行される脆弱性	CWE-122 CWE-190 CWE-noinfo	CVE-2024-49089	2025-01-17 15:45	2024-12-10	Show	GitHub Exploit DB Packet Storm

1558	9.9	緊急 Network	Hitachi Energy	FOXMAN-UN UNEM	Hitachi Energy の FOXMAN-UN および UNEM における脆弱性	CWE-286 CWE-noinfo	CVE-2024-28020	2025-01-17 15:43	2024-06-11	Show	GitHub Exploit DB Packet Storm

1559	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Window…	Windows IP Routing Management Snapin のリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2024-49080	2025-01-17 15:42	2024-12-10	Show	GitHub Exploit DB Packet Storm

1560	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	Windows 仮想化ベースのセキュリティ (VBS) エンクレーブの特権昇格の脆弱性	CWE-287 CWE-noinfo	CVE-2024-49076	2025-01-17 15:39	2024-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
711	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress-to-candidate for Salesforce CRM allows Reflected XSS. This issue affects WordP…	CWE-79 Cross-site Scripting	CVE-2025-23657	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

712	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 – Paystack Add-on allows Reflected XSS. This issue affects Contact Form 7…	CWE-79 Cross-site Scripting	CVE-2025-23655	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

713	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Form To Online Booking allows Reflected XSS. This issue affects Form To Online Booking: …	CWE-79 Cross-site Scripting	CVE-2025-23653	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

714	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Add custom content after post allows Reflected XSS. This issue affects Add custom conten…	CWE-79 Cross-site Scripting	CVE-2025-23652	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

715	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Scroll Top allows Reflected XSS. This issue affects Scroll Top: from n/a through 1.3.3.	CWE-79 Cross-site Scripting	CVE-2025-23651	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

716	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in razvypp Tidy.ro allows Reflected XSS. This issue affects Tidy.ro: from n/a through 1.3.	CWE-79 Cross-site Scripting	CVE-2025-23650	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

717	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wjharil AdsMiddle allows Reflected XSS. This issue affects AdsMiddle: from n/a through 1.0.	CWE-79 Cross-site Scripting	CVE-2025-23648	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

718	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ariagle WP-Clap allows Reflected XSS. This issue affects WP-Clap: from n/a through 1.5.	CWE-79 Cross-site Scripting	CVE-2025-23647	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

719	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Brooks Library Instruction Recorder allows Reflected XSS. This issue affects Library Instruc…	CWE-79 Cross-site Scripting	CVE-2025-23646	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

720	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in craig.edmunds@gmail.com Recip.ly allows Reflected XSS. This issue affects Recip.ly: from n/a thro…	CWE-79 Cross-site Scripting	CVE-2025-23598	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed