Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	6.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	ワイヤレス広域ネットワークサービス (WwanSvc) の特権昇格の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49101	2025-01-17 15:52	2024-12-10	Show	GitHub Exploit DB Packet Storm

1552	5.6	警告 Network	Hitachi Energy	FOXMAN-UN UNEM	Hitachi Energy の FOXMAN-UN および UNEM における過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2024-28022	2025-01-17 15:50	2024-06-11	Show	GitHub Exploit DB Packet Storm

1553	7.1	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2021-47191	2025-01-17 15:49	2021-10-18	Show	GitHub Exploit DB Packet Storm

1554	6.8	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	Windows モバイルブロードバンドドライバーの特権昇格の脆弱性	CWE-125 CWE-noinfo	CVE-2024-49092	2025-01-17 15:49	2024-12-10	Show	GitHub Exploit DB Packet Storm

1555	7.2	重要 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Windows Server 2012 Microso…	Windows ドメインネームサービスのリモートでコードが実行される脆弱性	CWE-591 CWE-noinfo	CVE-2024-49091	2025-01-17 15:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

1556	7.4	重要 Network	Hitachi Energy	FOXMAN-UN UNEM foxman un	複数の Hitachi Energy 製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2024-28021	2025-01-17 15:47	2024-06-11	Show	GitHub Exploit DB Packet Storm

1557	7.2	重要 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Window…	Windows ルーティングとリモートアクセスサービス (RRAS) のリモートでコードが実行される脆弱性	CWE-122 CWE-190 CWE-noinfo	CVE-2024-49089	2025-01-17 15:45	2024-12-10	Show	GitHub Exploit DB Packet Storm

1558	9.9	緊急 Network	Hitachi Energy	FOXMAN-UN UNEM	Hitachi Energy の FOXMAN-UN および UNEM における脆弱性	CWE-286 CWE-noinfo	CVE-2024-28020	2025-01-17 15:43	2024-06-11	Show	GitHub Exploit DB Packet Storm

1559	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Window…	Windows IP Routing Management Snapin のリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2024-49080	2025-01-17 15:42	2024-12-10	Show	GitHub Exploit DB Packet Storm

1560	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Windows Server 2019 Microsoft Windows Server 2025 Microsoft Window…	Windows 仮想化ベースのセキュリティ (VBS) エンクレーブの特権昇格の脆弱性	CWE-287 CWE-noinfo	CVE-2024-49076	2025-01-17 15:39	2024-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
891	-	-	-	Missing Authorization vulnerability in ashamil OPSI Israel Domestic Shipments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OPSI Israel Domestic Shipment…	CWE-862 Missing Authorization	CVE-2025-23766	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

892	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Data Dash allows Reflected XSS. This issue affects Data Dash: from n/a through 1.2.3.	CWE-79 Cross-site Scripting	CVE-2025-23751	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

893	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devbunchuk Custom Widget Creator allows Reflected XSS. This issue affects Custom Widget Creator: …	CWE-79 Cross-site Scripting	CVE-2025-23750	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

894	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Singsys -Awesome Gallery allows Reflected XSS. This issue affects Singsys -Awesome Galle…	CWE-79 Cross-site Scripting	CVE-2025-23748	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

895	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Podamibe Nepal Podamibe Twilio Private Call allows Reflected XSS. This issue affects Podamibe Twi…	CWE-79 Cross-site Scripting	CVE-2025-23742	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

896	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tauhidul Alam Advanced Angular Contact Form allows Reflected XSS. This issue affects Advanced Ang…	CWE-79 Cross-site Scripting	CVE-2025-23658	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

897	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress-to-candidate for Salesforce CRM allows Reflected XSS. This issue affects WordP…	CWE-79 Cross-site Scripting	CVE-2025-23657	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

898	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 – Paystack Add-on allows Reflected XSS. This issue affects Contact Form 7…	CWE-79 Cross-site Scripting	CVE-2025-23655	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

899	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Form To Online Booking allows Reflected XSS. This issue affects Form To Online Booking: …	CWE-79 Cross-site Scripting	CVE-2025-23653	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

900	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Add custom content after post allows Reflected XSS. This issue affects Add custom conten…	CWE-79 Cross-site Scripting	CVE-2025-23652	2025-02-14 22:15	2025-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed