Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
171 9.9 緊急
Network 		Apache Software Foundation Apache Pulsar Apache Software Foundation の Apache Pulsar における入力確認に関する脆弱性 New CWE-20
CWE-913
CVE-2024-27135 2025-01-23 11:43 2024-03-12 Show GitHub Exploit DB Packet Storm
172 7.8 重要
Local 		GLPI-PROJECT.ORG glpi agent GLPI-PROJECT.ORG の glpi agent における権限管理に関する脆弱性 New CWE-269
CWE-269
CVE-2024-28241 2025-01-23 11:43 2024-04-25 Show GitHub Exploit DB Packet Storm
173 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-2892 2025-01-23 11:43 2024-03-26 Show GitHub Exploit DB Packet Storm
174 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける OS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2024-2897 2025-01-23 11:43 2024-03-26 Show GitHub Exploit DB Packet Storm
175 5.4 警告
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-31306 2025-01-23 11:43 2024-04-7 Show GitHub Exploit DB Packet Storm
176 5.4 警告
Network 		Jegtheme Jeg Elementor Kit Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-32721 2025-01-23 11:43 2024-04-24 Show GitHub Exploit DB Packet Storm
177 8.8 重要
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-4352 2025-01-23 11:43 2024-05-16 Show GitHub Exploit DB Packet Storm
178 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2024-57575 2025-01-23 11:43 2025-01-16 Show GitHub Exploit DB Packet Storm
179 8.8 重要
Network 		jfinaloa project jfinaloa jfinaloa project の jfinaloa における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2024-57775 2025-01-23 11:43 2025-01-16 Show GitHub Exploit DB Packet Storm
180 4.3 警告
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-2560 2025-01-23 11:42 2024-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 - - - In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv… - CVE-2018-9389 2025-01-18 09:15 2025-01-18 Show GitHub Exploit DB Packet Storm
762 - - - zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (meta.db) is an append-list so group revocations/removals are ignored in the API. S… CWE-269
 Improper Privilege Management 		CVE-2025-23208 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
763 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2022-20128 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
764 - - - Rejected reason: Further investigation determines issue is not a vulnerability - CVE-2022-0303 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
765 - - - Rejected reason: Further investigation determines issue is not within scope of this CNA - CVE-2021-21158 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
766 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2021-0447 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
767 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2021-0323 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
768 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2020-0402 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
769 - - - In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service w… - CVE-2017-13322 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
770 3.3 LOW
Local 		termius termius An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. CWE-426
 Untrusted Search Path 		CVE-2024-55503 2025-01-18 07:51 2025-01-16 Show GitHub Exploit DB Packet Storm