Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1681	6.5	警告 Network	Synology Inc.	Surveillance Station	Synology Inc. の Surveillance Station における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-29240	2025-01-16 17:25	2024-03-28	Show	GitHub Exploit DB Packet Storm

1682	7.8	重要 Local	クアルコム	QCA6584AU ファームウェア QCA6391 ファームウェア qamsrv1h ファームウェア fastconnect 7800 ファームウェア fastconnect 6900 ファームウェア flight rb5 5g ファームウェア QCA6574A…	複数のクアルコム製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-45553	2025-01-16 17:25	2024-09-2	Show	GitHub Exploit DB Packet Storm

1683	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2021-47463	2025-01-16 17:25	2021-10-18	Show	GitHub Exploit DB Packet Storm

1684	5.9	警告 Network	Huawei	HarmonyOS EMUI	Huawei の EMUI および HarmonyOS における競合状態に関する脆弱性	CWE-362 CWE-362	CVE-2024-56441	2025-01-16 17:25	2024-12-26	Show	GitHub Exploit DB Packet Storm

1685	7.5	重要 Network	クアルコム	QCA6696 ファームウェア QCA6584AU ファームウェア QCA6391 ファームウェア fastconnect 7800 ファームウェア fastconnect 6800 ファームウェア fastconnect 6900 ファームウェア QCA6574A&nb…	複数のクアルコム製品における脆弱性	CWE-20 CWE-noinfo	CVE-2023-33099	2025-01-16 17:25	2023-05-17	Show	GitHub Exploit DB Packet Storm

1686	7.7	重要 Network	Synology Inc.	Surveillance Station	Synology Inc. の Surveillance Station における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-29229	2025-01-16 17:25	2024-03-28	Show	GitHub Exploit DB Packet Storm

1687	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	FH1202 ファームウェア	Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおける境界外書き込みに関する脆弱性	CWE-121 CWE-787	CVE-2024-2980	2025-01-16 17:25	2024-03-27	Show	GitHub Exploit DB Packet Storm

1688	7.5	重要 Network	クアルコム	immersive home 3210 ファームウェア ipq5302 ファームウェア fastconnect 7800 ファームウェア fastconnect 6900 ファームウェア IPQ6000 ファームウェア IPQ6018 ファームウェア ipq53…	複数のクアルコム製品における境界外読み取りに関する脆弱性	CWE-125 CWE-126	CVE-2024-45558	2025-01-16 17:25	2024-09-2	Show	GitHub Exploit DB Packet Storm

1689	7.5	重要 Network	Huawei	HarmonyOS	Huawei の HarmonyOS における脆弱性	CWE-264 CWE-noinfo	CVE-2024-56444	2025-01-16 17:25	2024-12-26	Show	GitHub Exploit DB Packet Storm

1690	5.5	警告 Local	Huawei	HarmonyOS	Huawei の HarmonyOS における脆弱性	CWE-120 CWE-noinfo	CVE-2024-56454	2025-01-16 17:25	2024-12-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
611	7.2	HIGH Network	-	-	The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insuff…	CWE-79 Cross-site Scripting	CVE-2024-11582	2025-02-19 13:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

612	7.3	HIGH Network	-	-	A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulatio…	CWE-77 CWE-74 Command Injection Injection	CVE-2025-1448	2025-02-19 11:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

613	-		-	-	In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a mal…	-	CVE-2024-57262	2025-02-19 11:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

614	-		-	-	In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258.	-	CVE-2024-57261	2025-02-19 11:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

615	4.3	MEDIUM Network	-	-	A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects unknown code of the file /pigeon/imgproxy/index.php. The manipulation of the ar…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2025-1447	2025-02-19 10:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

616	-		-	-	sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a siz…	-	CVE-2024-57259	2025-02-19 10:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

617	-		-	-	Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.	-	CVE-2024-57258	2025-02-19 10:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

618	-		-	-	A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.	-	CVE-2024-57257	2025-02-19 10:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

619	6.1	MEDIUM Network	-	-	The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all versions up to, and including, 1.6.72 due to insufficient input sanitization a…	CWE-79 Cross-site Scripting	CVE-2024-13508	2025-02-19 09:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

620	-		-	-	An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resultin…	-	CVE-2024-57256	2025-02-19 09:15	2025-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed