Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1671 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-38589 2025-01-16 17:50 2024-05-16 Show GitHub Exploit DB Packet Storm
1672 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2019 		Windows Defender Credential Guard の特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-26237 2025-01-16 17:48 2024-04-9 Show GitHub Exploit DB Packet Storm
1673 9.8 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 の特権の昇格の脆弱性 CWE-1390
CWE-noinfo
CVE-2024-38182 2025-01-16 17:42 2024-07-31 Show GitHub Exploit DB Packet Storm
1674 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2024-36973 2025-01-16 17:40 2024-06-4 Show GitHub Exploit DB Packet Storm
1675 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-35998 2025-01-16 17:38 2024-04-25 Show GitHub Exploit DB Packet Storm
1676 6.5 警告
Network 		VillaTheme Thank You Page Customizer for WooCommerce - Increase Your Sales VillaTheme の WordPress 用 Thank You Page Customizer for WooCommerce - Increase Your Sales における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1686 2025-01-16 17:31 2024-02-27 Show GitHub Exploit DB Packet Storm
1677 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2023-52837 2025-01-16 17:27 2023-11-7 Show GitHub Exploit DB Packet Storm
1678 8.8 重要
Network 		マイクロソフト Microsoft Visual Studio
Microsoft SQL Server
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-125
CWE-noinfo
CVE-2024-28938 2025-01-16 17:26 2024-04-9 Show GitHub Exploit DB Packet Storm
1679 7.5 重要
Network 		クアルコム QCA6584AU ファームウェア
fastconnect 7800 ファームウェア
qcm8550 ファームウェア
fastconnect 6900 ファームウェア
qcn9024 ファームウェア
qcc710 ファームウェア
qcm4490 ファームウェア
fa… 		複数のクアルコム製品における脆弱性 CWE-20
CWE-noinfo
CVE-2023-33100 2025-01-16 17:25 2023-05-17 Show GitHub Exploit DB Packet Storm
1680 7.8 重要
Local 		クアルコム fastconnect 7800 ファームウェア
fastconnect 6800 ファームウェア
fastconnect 6900 ファームウェア
AQT1000 ファームウェア
flight rb5 5g ファームウェア
fastconnect 6700… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2024-21468 2025-01-16 17:25 2024-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
821 7.8 HIGH
Local 		dell supportassist Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leadi… CWE-59
Link Following 		CVE-2025-22480 2025-02-19 03:39 2025-02-14 Show GitHub Exploit DB Packet Storm
822 - - - Duende.AccessTokenManagement is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. Duende.AccessTokenManagement contains a race condition when requesting access tokens using … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-26620 2025-02-19 03:15 2025-02-19 Show GitHub Exploit DB Packet Storm
823 - - - An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role (Config Admin) could leverage a race condition to escalate privileges. - CVE-2024-51505 2025-02-19 03:15 2025-02-19 Show GitHub Exploit DB Packet Storm
824 3.8 LOW
Network 		- - A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, … CWE-20
 Improper Input Validation  		CVE-2024-4028 2025-02-19 03:15 2025-02-19 Show GitHub Exploit DB Packet Storm
825 - - - Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks… - CVE-2023-34402 2025-02-19 03:15 2025-02-14 Show GitHub Exploit DB Packet Storm
826 - - - Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated … - CVE-2023-34400 2025-02-19 03:15 2025-02-14 Show GitHub Exploit DB Packet Storm
827 - - - Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library c… - CVE-2023-34399 2025-02-19 03:15 2025-02-14 Show GitHub Exploit DB Packet Storm
828 - - - Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a v… - CVE-2023-34398 2025-02-19 03:15 2025-02-14 Show GitHub Exploit DB Packet Storm
829 - - - Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed. - CVE-2023-34397 2025-02-19 03:15 2025-02-14 Show GitHub Exploit DB Packet Storm
830 - - - Cross-Site Request Forgery (CSRF) vulnerability in Pukhraj Suthar Simple Responsive Menu allows Stored XSS. This issue affects Simple Responsive Menu: from n/a through 2.1. CWE-352
 Origin Validation Error 		CVE-2025-26543 2025-02-19 03:15 2025-02-13 Show GitHub Exploit DB Packet Storm