Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	6.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	ワイヤレス広域ネットワークサービス (WwanSvc) の特権昇格の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49101	2025-01-17 15:52	2024-12-10	Show	GitHub Exploit DB Packet Storm

1552	5.6	警告 Network	Hitachi Energy	FOXMAN-UN UNEM	Hitachi Energy の FOXMAN-UN および UNEM における過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2024-28022	2025-01-17 15:50	2024-06-11	Show	GitHub Exploit DB Packet Storm

1553	7.1	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-47191	2025-01-17 15:49	2021-10-18	Show	GitHub Exploit DB Packet Storm

1554	6.8	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	Windows モバイルブロードバンドドライバーの特権昇格の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49092	2025-01-17 15:49	2024-12-10	Show	GitHub Exploit DB Packet Storm

1555	7.2	重要 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Windows Server 2012 Microso…	Windows ドメインネームサービスのリモートでコードが実行される脆弱性	CWE-591 CWE-noinfo	CVE-2024-49091	2025-01-17 15:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

1556	7.4	重要 Network	Hitachi Energy	FOXMAN-UN UNEM foxman un	複数の Hitachi Energy 製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2024-28021	2025-01-17 15:47	2024-06-11	Show	GitHub Exploit DB Packet Storm

1557	7.2	重要 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Window…	Windows ルーティングとリモートアクセスサービス (RRAS) のリモートでコードが実行される脆弱性	CWE-122 CWE-190 CWE-noinfo	CVE-2024-49089	2025-01-17 15:45	2024-12-10	Show	GitHub Exploit DB Packet Storm

1558	9.9	緊急 Network	Hitachi Energy	FOXMAN-UN UNEM	Hitachi Energy の FOXMAN-UN および UNEM における脆弱性	CWE-286 CWE-noinfo	CVE-2024-28020	2025-01-17 15:43	2024-06-11	Show	GitHub Exploit DB Packet Storm

1559	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Window…	Windows IP Routing Management Snapin のリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2024-49080	2025-01-17 15:42	2024-12-10	Show	GitHub Exploit DB Packet Storm

1560	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	Windows 仮想化ベースのセキュリティ (VBS) エンクレーブの特権昇格の脆弱性	CWE-287 CWE-noinfo	CVE-2024-49076	2025-01-17 15:39	2024-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
881	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johannes van Poelgeest Admin Options Pages allows Reflected XSS. This issue affects Admin Options…	CWE-79 Cross-site Scripting	CVE-2025-23905	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

882	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Essential WP Real Estate allows Reflected XSS. This issue affects Essential WP Real Esta…	CWE-79 Cross-site Scripting	CVE-2025-23857	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

883	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in michelem NoFollow Free allows Reflected XSS. This issue affects NoFollow Free: from n/a through 1…	CWE-79 Cross-site Scripting	CVE-2025-23853	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

884	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Coronavirus (COVID-19) Outbreak Data Widgets allows Reflected XSS. This issue affects Co…	CWE-79 Cross-site Scripting	CVE-2025-23851	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

885	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wassereimer Easy Code Placement allows Reflected XSS. This issue affects Easy Code Placement: fro…	CWE-79 Cross-site Scripting	CVE-2025-23790	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

886	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tahminajannat URL Shortener \| Conversion Tracking \| AB Testing \| WooCommerce allows Reflected X…	CWE-79 Cross-site Scripting	CVE-2025-23789	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

887	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Filter allows Reflected XSS. This issue affects Easy Filter: from n/a through 1.10.	CWE-79 Cross-site Scripting	CVE-2025-23788	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

888	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Bet allows Reflected XSS. This issue affects Easy Bet: from n/a through 1.0.7.	CWE-79 Cross-site Scripting	CVE-2025-23787	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

889	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Email to Download allows Reflected XSS. This issue affects Email to Download: from n/a th…	CWE-79 Cross-site Scripting	CVE-2025-23786	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

890	-	-	-	Missing Authorization vulnerability in Murali Push Notification for Post and BuddyPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Push Notification f…	CWE-862 Missing Authorization	CVE-2025-23771	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed