Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1601 5.3 警告
Network 		NetApp
日本電気
ISC, Inc.		 Active IQ Unified Manager
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
BIND 		ISC, Inc. の BIND 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2023-5680 2025-01-17 13:18 2023-10-20 Show GitHub Exploit DB Packet Storm
1602 7.5 重要
Network 		日本電気
Fedora Project
NetApp
ISC, Inc.		 ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND 		NetApp の Active IQ Unified Manager 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2023-5679 2025-01-17 13:13 2023-10-20 Show GitHub Exploit DB Packet Storm
1603 7.5 重要
Network 		日本電気
Fedora Project
NetApp
ISC, Inc.		 ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND 		NetApp の Active IQ Unified Manager 等複数ベンダの製品における到達可能なアサーションに関する脆弱性 CWE-617
CWE-617
CVE-2023-5517 2025-01-17 13:12 2023-10-11 Show GitHub Exploit DB Packet Storm
1604 7.5 重要
Network 		Fedora Project
日本電気
ISC, Inc.		 NEC Multimedia OLAP for 映像分析サービス
Fedora
ESMPRO/ServerAgent
BIND 		NetApp の ONTAP (旧 Clustered Data ONTAP) 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2023-4408 2025-01-17 13:10 2023-08-18 Show GitHub Exploit DB Packet Storm
1605 9.8 緊急
Network 		Apache Software Foundation Apache Struts Apache Struts 2 における外部からアクセス可能なファイルの脆弱性 (S2-066) CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2023-50164 2025-01-17 12:58 2023-12-8 Show GitHub Exploit DB Packet Storm
1606 9.8 緊急
Network 		Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 CWE-74
CWE-74
CVE-2023-51388 2025-01-17 12:08 2023-12-18 Show GitHub Exploit DB Packet Storm
1607 9.8 緊急
Network 		Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CWE-288
CVE-2024-13179 2025-01-17 12:08 2025-01-14 Show GitHub Exploit DB Packet Storm
1608 5.4 警告
Network 		Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-13183 2025-01-17 12:08 2025-01-10 Show GitHub Exploit DB Packet Storm
1609 4.3 警告
Network 		Progress Software Corporation MOVEit Transfer Progress Software Corporation の MOVEit Transfer における脆弱性 CWE-778
CWE-Other
CVE-2024-2291 2025-01-17 12:08 2024-03-20 Show GitHub Exploit DB Packet Storm
1610 4.8 警告
Network 		MantisBT Group MantisBT MantisBT Group の MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-34081 2025-01-17 12:08 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 7.8 HIGH
Local 		openatom openharmony in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free. Update CWE-416
 Use After Free 		CVE-2025-0304 2025-02-12 02:24 2025-02-7 Show GitHub Exploit DB Packet Storm
352 - - - An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote… New CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2025-24472 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
353 - - - An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve… New CWE-41
 Improper Resolution of Path Equivalence 		CVE-2025-24470 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
354 - - - Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to S… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2025-22399 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
355 7.8 HIGH
Local 		- - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the curr… New CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2025-21158 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
356 7.8 HIGH
Local 		- - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitat… New CWE-787
 Out-of-bounds Write 		CVE-2025-21157 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
357 5.5 MEDIUM
Local 		- - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could ex… New CWE-20
 Improper Input Validation  		CVE-2025-21126 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
358 5.5 MEDIUM
Local 		- - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this v… New CWE-476
 NULL Pointer Dereference 		CVE-2025-21125 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
359 5.5 MEDIUM
Local 		- - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabi… New CWE-125
Out-of-bounds Read 		CVE-2025-21124 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm
360 7.8 HIGH
Local 		- - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exp… New CWE-122
Heap-based Buffer Overflow 		CVE-2025-21123 2025-02-12 02:15 2025-02-12 Show GitHub Exploit DB Packet Storm