Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1671 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-38589 2025-01-16 17:50 2024-05-16 Show GitHub Exploit DB Packet Storm
1672 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2019 		Windows Defender Credential Guard の特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-26237 2025-01-16 17:48 2024-04-9 Show GitHub Exploit DB Packet Storm
1673 9.8 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 の特権の昇格の脆弱性 CWE-1390
CWE-noinfo
CVE-2024-38182 2025-01-16 17:42 2024-07-31 Show GitHub Exploit DB Packet Storm
1674 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2024-36973 2025-01-16 17:40 2024-06-4 Show GitHub Exploit DB Packet Storm
1675 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-35998 2025-01-16 17:38 2024-04-25 Show GitHub Exploit DB Packet Storm
1676 6.5 警告
Network 		VillaTheme Thank You Page Customizer for WooCommerce - Increase Your Sales VillaTheme の WordPress 用 Thank You Page Customizer for WooCommerce - Increase Your Sales における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1686 2025-01-16 17:31 2024-02-27 Show GitHub Exploit DB Packet Storm
1677 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2023-52837 2025-01-16 17:27 2023-11-7 Show GitHub Exploit DB Packet Storm
1678 8.8 重要
Network 		マイクロソフト Microsoft Visual Studio
Microsoft SQL Server
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-125
CWE-noinfo
CVE-2024-28938 2025-01-16 17:26 2024-04-9 Show GitHub Exploit DB Packet Storm
1679 7.5 重要
Network 		クアルコム QCA6584AU ファームウェア
fastconnect 7800 ファームウェア
qcm8550 ファームウェア
fastconnect 6900 ファームウェア
qcn9024 ファームウェア
qcc710 ファームウェア
qcm4490 ファームウェア
fa… 		複数のクアルコム製品における脆弱性 CWE-20
CWE-noinfo
CVE-2023-33100 2025-01-16 17:25 2023-05-17 Show GitHub Exploit DB Packet Storm
1680 7.8 重要
Local 		クアルコム fastconnect 7800 ファームウェア
fastconnect 6800 ファームウェア
fastconnect 6900 ファームウェア
AQT1000 ファームウェア
flight rb5 5g ファームウェア
fastconnect 6700… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-21468 2025-01-16 17:25 2024-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
601 6.4 MEDIUM
Network 		- - The UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframe' shortcode in all versio… CWE-79
Cross-site Scripting 		CVE-2024-11335 2025-02-19 17:15 2025-02-19 Show GitHub Exploit DB Packet Storm
602 - - - Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory - CVE-2025-0633 2025-02-19 16:15 2025-02-19 Show GitHub Exploit DB Packet Storm
603 - - - Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while log… CWE-79
Cross-site Scripting 		CVE-2025-25054 2025-02-19 15:15 2025-02-19 Show GitHub Exploit DB Packet Storm
604 - - - Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploitable when TinyMCE6 is used as a rich text editor and an arbitrary script may b… CWE-79
Cross-site Scripting 		CVE-2025-24841 2025-02-19 15:15 2025-02-19 Show GitHub Exploit DB Packet Storm
605 - - - Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in user's web browser. CWE-79
Cross-site Scripting 		CVE-2025-22888 2025-02-19 15:15 2025-02-19 Show GitHub Exploit DB Packet Storm
606 6.4 MEDIUM
Network 		- - The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and inc… CWE-79
Cross-site Scripting 		CVE-2025-1065 2025-02-19 15:15 2025-02-19 Show GitHub Exploit DB Packet Storm
607 6.4 MEDIUM
Network 		- - The User Private Files – File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘new-fldr-name’ parameter in all versions up… CWE-79
Cross-site Scripting 		CVE-2024-13799 2025-02-19 15:15 2025-02-19 Show GitHub Exploit DB Packet Storm
608 6.1 MEDIUM
Network 		- - The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1007. This is due to missing or incorrect nonce val… CWE-352
 Origin Validation Error 		CVE-2025-1441 2025-02-19 14:15 2025-02-19 Show GitHub Exploit DB Packet Storm
609 4.3 MEDIUM
Network 		- - Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the … CWE-79
Cross-site Scripting 		CVE-2025-22622 2025-02-19 13:15 2025-02-19 Show GitHub Exploit DB Packet Storm
610 6.4 MEDIUM
Network 		- - The Easypromos Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Easypromos shortcode in all versions up to, and including, 1.3.8 due to insufficient input san… CWE-79
Cross-site Scripting 		CVE-2024-13443 2025-02-19 13:15 2025-02-19 Show GitHub Exploit DB Packet Storm