Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1571 5.9 警告
Network 		Devolutions Devolutions Remote Desktop Manager Devolutions の Devolutions Remote Desktop Manager における不完全なクリーンアップに関する脆弱性 CWE-459
不完全なクリーンアップ 		CVE-2024-2403 2025-01-17 15:01 2024-03-13 Show GitHub Exploit DB Packet Storm
1572 5.4 警告
Network 		Wpmet ElementsKit Elementor addons Wpmet の WordPress 用 ElementsKit Elementor addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3650 2025-01-17 15:01 2024-05-2 Show GitHub Exploit DB Packet Storm
1573 7.8 重要
Local 		Progress Software Corporation telerik reporting Progress Software Corporation の telerik reporting における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-4200 2025-01-17 15:00 2024-05-15 Show GitHub Exploit DB Packet Storm
1574 6.5 警告
Network 		Progress Software Corporation telerik reporting Progress Software Corporation の telerik reporting における XML 外部エンティティの脆弱性 CWE-611
CWE-611
CVE-2024-4357 2025-01-17 15:00 2024-05-15 Show GitHub Exploit DB Packet Storm
1575 5.3 警告
Network 		BoldGrid W3 Total Cache BoldGrid の WordPress 用 W3 Total Cache における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-12006 2025-01-17 15:00 2024-12-1 Show GitHub Exploit DB Packet Storm
1576 5.3 警告
Network 		vyperlang vyper vyperlang の Python 用 vyper における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2024-24564 2025-01-17 15:00 2024-02-26 Show GitHub Exploit DB Packet Storm
1577 6.1 警告
Network 		sfu open journal systems sfu の open journal systems におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25436 2025-01-17 15:00 2024-03-1 Show GitHub Exploit DB Packet Storm
1578 5.3 警告
Network 		vyperlang vyper vyperlang の Python 用 vyper における脆弱性 CWE-119
CWE-noinfo
CVE-2024-26149 2025-01-17 15:00 2024-02-26 Show GitHub Exploit DB Packet Storm
1579 7.3 重要
Network 		MantisBT Group MantisBT MantisBT Group の MantisBT における脆弱性 CWE-305
CWE-620
CWE-Other
CVE-2024-34077 2025-01-17 15:00 2024-05-14 Show GitHub Exploit DB Packet Storm
1580 5.4 警告
Network 		Vanderbilt redcap Vanderbilt の redcap におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-56376 2025-01-17 15:00 2024-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 5.3 MEDIUM
Local 		- - A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affected by this issue is the function sprintf of the file epsdaemon of the component … - CVE-2025-1370 2025-02-19 05:15 2025-02-17 Show GitHub Exploit DB Packet Storm
462 4.5 MEDIUM
Local 		- - A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The ma… - CVE-2025-1369 2025-02-19 05:15 2025-02-17 Show GitHub Exploit DB Packet Storm
463 2.3 LOW
Local 		- - A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects the function ReadConfiguration of the file /opt/MicroWorld/etc/… - CVE-2025-1368 2025-02-19 05:15 2025-02-17 Show GitHub Exploit DB Packet Storm
464 5.3 MEDIUM
Local 		- - A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation l… - CVE-2025-1367 2025-02-19 05:15 2025-02-17 Show GitHub Exploit DB Packet Storm
465 - - - Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables and files. It also allows to show the con… CWE-416
 Use After Free 		CVE-2025-26603 2025-02-19 04:15 2025-02-19 Show GitHub Exploit DB Packet Storm
466 - - - Home Assistant Core is an open source home automation that puts local control and privacy first. Affected versions are subject to a potential man-in-the-middle attacks due to missing SSL certificate … CWE-940
 Improper Verification of Source of a Communication Channel 		CVE-2025-25305 2025-02-19 04:15 2025-02-19 Show GitHub Exploit DB Packet Storm
467 - - - Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT are able to appear as a DM in client to a node even though they were not decoded with PK… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2025-21608 2025-02-19 04:15 2025-02-19 Show GitHub Exploit DB Packet Storm
468 6.7 MEDIUM
Local 		- - A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibili… CWE-787
 Out-of-bounds Write 		CVE-2024-45774 2025-02-19 04:15 2025-02-19 Show GitHub Exploit DB Packet Storm
469 - - - The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's WPS (Web Processing Service) implementation allows unauthorized access to files… CWE-22
Path Traversal 		CVE-2025-25284 2025-02-19 04:15 2025-02-19 Show GitHub Exploit DB Packet Storm
470 - - - CIE.AspNetCore.Authentication is an AspNetCore Remote Authenticator for CIE 3.0. Authentication using Spid and CIE is based on the SAML2 standard which provides two entities: 1. Identity Provider (ID… CWE-287
Improper Authentication 		CVE-2025-24895 2025-02-19 04:15 2025-02-19 Show GitHub Exploit DB Packet Storm