Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1651	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-47218	2025-01-17 09:44	2021-11-19	Show	GitHub Exploit DB Packet Storm

1652	7.8	重要 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2024-26704	2025-01-17 09:44	2024-01-18	Show	GitHub Exploit DB Packet Storm

1653	7.8	重要 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-27396	2025-01-17 09:44	2024-04-24	Show	GitHub Exploit DB Packet Storm

1654	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-53171	2025-01-17 09:44	2024-11-14	Show	GitHub Exploit DB Packet Storm

1655	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-56604	2025-01-17 09:44	2024-10-15	Show	GitHub Exploit DB Packet Storm

1656	4.3	警告 Network	IBM	IBM InfoSphere Information Server	IBM の IBM InfoSphere Information Server におけるエラーメッセージによる情報漏えいに関する脆弱性	CWE-209 エラーメッセージによる情報漏えい	CVE-2024-51460	2025-01-17 08:52	2024-12-5	Show	GitHub Exploit DB Packet Storm

1657	6.8	警告 Physics	Huawei	Yale-AL50A ファームウェア Princeton-AL10D ファームウェア P30 Pro ファームウェア Yale-AL00A ファームウェア Mate 20 ファームウェア P30 ファームウェア YaleP-AL10B ファームウェア	複数の Huawei 製品における不正な認証に関する脆弱性	CWE-285 CWE-863	CVE-2020-9081	2025-01-16 18:13	2020-02-18	Show	GitHub Exploit DB Packet Storm

1658	7.5	重要 Network	マイクロソフト	Microsoft Copilot Studio	Copilot Studio の情報漏えいの脆弱性	CWE-200 CWE-noinfo	CVE-2024-43610	2025-01-16 18:08	2024-10-8	Show	GitHub Exploit DB Packet Storm

1659	7.5	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Window…	Windows Hyper-V のリモートでコードが実行される脆弱性	CWE-20 CWE-829 CWE-noinfo	CVE-2024-30092	2025-01-16 18:05	2024-10-8	Show	GitHub Exploit DB Packet Storm

1660	4.1	警告 Physics	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Window…	セキュアブートのセキュリティ機能のバイパスの脆弱性	CWE-284 CWE-noinfo	CVE-2024-28922	2025-01-16 18:05	2024-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
51	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in djjmz Simple Auto Tag allows Stored XSS. This issue affects Simple Auto Tag: from n/a through 1.1. New	CWE-352 Origin Validation Error	CVE-2025-25153	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

52	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in LukaszWiecek Smart DoFollow allows Stored XSS. This issue affects Smart DoFollow: from n/a through 1.0.2. New	CWE-352 Origin Validation Error	CVE-2025-25152	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

53	-	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes uListing allows SQL Injection. This issue affects uListing: from n/a through 2.1.6. New	CWE-89 SQL Injection	CVE-2025-25151	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

54	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Danillo Nunes Login-box allows Stored XSS. This issue affects Login-box: from n/a through 2.0.4. New	CWE-352 Origin Validation Error	CVE-2025-25149	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

55	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in ElbowRobo Read More Copy Link allows Stored XSS. This issue affects Read More Copy Link: from n/a through 1.0.2. New	CWE-352 Origin Validation Error	CVE-2025-25148	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

56	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Phillip.Gooch Auto SEO allows Stored XSS. This issue affects Auto SEO: from n/a through 2.5.6. New	CWE-352 Origin Validation Error	CVE-2025-25147	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

57	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in saleandro Songkick Concerts and Festivals allows Cross Site Request Forgery. This issue affects Songkick Concerts and Festivals: from n/a through 0.… New	CWE-352 Origin Validation Error	CVE-2025-25146	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

58	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in jordan.hatch Infusionsoft Analytics allows Cross Site Request Forgery. This issue affects Infusionsoft Analytics: from n/a through 2.0. New	CWE-352 Origin Validation Error	CVE-2025-25145	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

59	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theasys Theasys allows Stored XSS. This issue affects Theasys: from n/a through 1.0.1. New	CWE-79 Cross-site Scripting	CVE-2025-25144	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

60	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in ibasit GlobalQuran allows Cross Site Request Forgery. This issue affects GlobalQuran: from n/a through 1.0. New	CWE-352 Origin Validation Error	CVE-2025-25143	2025-02-7 19:15	2025-02-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed