Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
161 5.5 警告
Local 		クアルコム WCN3680B ファームウェア
wcn3980 ファームウェア
sw5100p ファームウェア
WSA8835 ファームウェア
WSA8830 ファームウェア
WCN3660B ファームウェア
sw5100 ファームウェア
qcs8550 ファームウェア
WCN398… 		複数のクアルコム製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-126
CVE-2024-33061 2025-01-14 18:49 2024-04-23 Show GitHub Exploit DB Packet Storm
162 6.4 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3645 2025-01-14 18:49 2024-04-22 Show GitHub Exploit DB Packet Storm
163 5.3 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor における重要な情報のセキュアでない格納に関する脆弱性 New CWE-922
重要な情報のセキュアでない格納 		CVE-2024-3733 2025-01-14 18:48 2024-04-25 Show GitHub Exploit DB Packet Storm
164 6.5 警告
Network 		lunary lunary lunary におけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
CWE-821
CVE-2024-4154 2025-01-14 18:48 2024-05-21 Show GitHub Exploit DB Packet Storm
165 5.3 警告
Network 		GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORG の GLPI におけるセッションの固定化の脆弱性 New CWE-287
CWE-384
CWE-79
CVE-2024-50339 2025-01-14 18:48 2024-12-12 Show GitHub Exploit DB Packet Storm
166 7.1 重要
Local 		Huawei HarmonyOS
EMUI 		Huawei の EMUI および HarmonyOS における脆弱性 New CWE-16
CWE-noinfo
CVE-2024-54099 2025-01-14 18:48 2024-12-12 Show GitHub Exploit DB Packet Storm
167 5.3 警告
Network 		Huawei NIP6600 ファームウェア
NIP6800 ファームウェア
Secospace USG6500 ファームウェア
NIP6300 ファームウェア
IPS Module ファームウェア
Secospace USG6300 ファームウェア
USG6000V ファー… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2020-1821 2025-01-14 18:48 2024-12-28 Show GitHub Exploit DB Packet Storm
168 5.3 警告
Network 		Huawei NIP6600 ファームウェア
NIP6800 ファームウェア
Secospace USG6500 ファームウェア
NIP6300 ファームウェア
IPS Module ファームウェア
Secospace USG6300 ファームウェア
USG6000V ファー… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2020-1823 2025-01-14 18:48 2024-12-28 Show GitHub Exploit DB Packet Storm
169 7.2 重要
Network 		Huawei Mate 30 ファームウェア Huawei の Mate 30 ファームウェアにおける境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CWE-787
CVE-2020-9211 2025-01-14 18:48 2020-02-18 Show GitHub Exploit DB Packet Storm
170 9.8 緊急
Network 		- CSZ CMS における危険なタイプのファイルの無制限アップロードに関する脆弱性 New CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-25414 2025-01-14 18:48 2024-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 7.5 HIGH
Network 		huawei emui
harmonyos 		Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Update CWE-287
Improper Authentication 		CVE-2023-52955 2025-01-14 04:09 2025-01-8 Show GitHub Exploit DB Packet Storm
352 7.5 HIGH
Network 		huawei emui
harmonyos 		Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. Update CWE-276
Incorrect Default Permissions  		CVE-2023-52954 2025-01-14 04:09 2025-01-8 Show GitHub Exploit DB Packet Storm
353 9.1 CRITICAL
Network 		huawei emui
harmonyos 		Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Update CWE-22
Path Traversal 		CVE-2023-52953 2025-01-14 04:08 2025-01-8 Show GitHub Exploit DB Packet Storm
354 - - - An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42. New CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2024-5743 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
355 - - - Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution. New - CVE-2024-46479 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
356 - - - A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert New - CVE-2024-6352 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
357 - - - Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile. New - CVE-2024-12211 2025-01-14 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
358 - - - Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS < 134. Update - CVE-2025-23109 2025-01-14 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
359 - - - Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability affects Firefox for iOS < 134. Update - CVE-2025-23108 2025-01-14 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
360 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - ArticleFeedbackv5 extension allows Cross-Site Scripting (… Update - CVE-2025-23079 2025-01-14 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm