Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1751 7.8 重要
Local
クアルコム APQ8030 ファームウェア
APQ8064 ファームウェア
9206 lte modem ファームウェア
c-v2x 9150 ファームウェア
9207 lte modem ファームウェア
CSRA6640 ファームウェア
APQ8037 …
複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-787
CWE-823
CVE-2023-33066 2025-01-16 15:43 2023-05-17 Show GitHub Exploit DB Packet Storm
1752 7.8 重要
Local
マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2025
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用
CVE-2025-21335 2025-01-16 15:43 2025-01-14 Show GitHub Exploit DB Packet Storm
1753 7.3 重要
Local
マイクロソフト Azure Data Studio Azure Data Studio の特権の昇格の脆弱性 CWE-284
CWE-noinfo
CVE-2024-26203 2025-01-16 15:38 2024-03-12 Show GitHub Exploit DB Packet Storm
1754 8.8 重要
Network
マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-209
CWE-noinfo
CVE-2024-28939 2025-01-16 15:34 2024-04-9 Show GitHub Exploit DB Packet Storm
1755 8.8 重要
Network
マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-29044 2025-01-16 15:31 2024-04-9 Show GitHub Exploit DB Packet Storm
1756 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2024-53204 2025-01-16 15:25 2024-11-4 Show GitHub Exploit DB Packet Storm
1757 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他
CVE-2024-26709 2025-01-16 15:23 2024-02-14 Show GitHub Exploit DB Packet Storm
1758 4.7 警告
Local
Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック
CVE-2023-52505 2025-01-16 15:20 2023-10-6 Show GitHub Exploit DB Packet Storm
1759 7.1 重要
Local
Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2023-52501 2025-01-16 15:17 2023-09-8 Show GitHub Exploit DB Packet Storm
1760 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他
CVE-2023-52500 2025-01-16 15:14 2023-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 9.8 CRITICAL
Network
tenda ac6_firmware Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function. Update CWE-120
Classic Buffer Overflow
CVE-2025-25343 2025-02-20 01:41 2025-02-13 Show GitHub Exploit DB Packet Storm
302 5.8 MEDIUM
Network
- - A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been de… New CWE-284
Improper Access Control
CVE-2025-20153 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
303 4.1 MEDIUM
Network
- - A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code inj… New CWE-94
CWE-74
Code Injection
Injection
CVE-2025-1465 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
304 8.0 HIGH
Network
- - IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection. An attacker could execute arbitrary commands on the sys… New CWE-502
 Deserialization of Untrusted Data
CVE-2024-45084 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
305 6.5 MEDIUM
Network
- - IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks. New CWE-863
 Incorrect Authorization
CVE-2024-45081 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
306 6.1 MEDIUM
Network
- - A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack agains… New CWE-79
Cross-site Scripting
CVE-2025-20211 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
307 4.4 MEDIUM
Local
- - A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To ex… New CWE-200
Information Exposure
CVE-2025-20158 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
308 5.9 MEDIUM
Network
- - IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client  uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… New CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-28780 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
309 8.8 HIGH
Network
- - IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserialization. This vulnerability allows users to execute arbitrary code, escalate privil… New CWE-502
 Deserialization of Untrusted Data
CVE-2024-28777 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm
310 5.4 MEDIUM
Network
- - IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu… New CWE-79
Cross-site Scripting
CVE-2024-28776 2025-02-20 01:15 2025-02-20 Show GitHub Exploit DB Packet Storm