Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1851	6.8	警告 Physics	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 11 Microsoft Windows Server 2025 Microsoft Window…	Windows モバイルブロードバンドドライバーの特権昇格の脆弱性	CWE-125 CWE-190 CWE-noinfo	CVE-2024-49078	2025-01-16 12:04	2024-12-10	Show	GitHub Exploit DB Packet Storm

1852	7	重要 Local	The Dimensional Gate Co.	Linux Ratfor	Linux Ratfor におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2024-55577	2025-01-16 11:55	2025-01-15	Show	GitHub Exploit DB Packet Storm

1853	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	fh1205 ファームウェア	Shenzhen Tenda Technology Co.,Ltd. の fh1205 ファームウェアにおける境界外書き込みに関する脆弱性	CWE-121 CWE-787	CVE-2024-3007	2025-01-16 11:44	2024-03-27	Show	GitHub Exploit DB Packet Storm

1854	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	W15E ファームウェア	Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性	CWE-121 CWE-787	CVE-2024-4118	2025-01-16 11:44	2024-04-24	Show	GitHub Exploit DB Packet Storm

1855	8.8	重要 Network	ThimPress	LearnPress	ThimPress の WordPress 用 LearnPress における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2024-4397	2025-01-16 11:44	2024-05-14	Show	GitHub Exploit DB Packet Storm

1856	7.5	重要 Network	クアルコム	fastconnect 6800 ファームウェア AR8035 ファームウェア immersive home 318 ファームウェア immersive home 216 ファームウェア fastconnect 6200 ファームウェア IPQ5010&nb…	複数のクアルコム製品における境界外読み取りに関する脆弱性	CWE-125 CWE-126	CVE-2024-21477	2025-01-16 11:44	2024-05-6	Show	GitHub Exploit DB Packet Storm

1857	5.3	警告 Network	Metagauss Inc.	eventprime	Metagauss Inc. の WordPress 用 eventprime における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1125	2025-01-16 11:38	2024-03-9	Show	GitHub Exploit DB Packet Storm

1858	4.3	警告 Network	Extend Themes	colibri page builder	Extend Themes の WordPress 用 colibri page builder におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-1361	2025-01-16 11:38	2024-02-23	Show	GitHub Exploit DB Packet Storm

1859	5.4	警告 Network	Leap13	Premium Addons for Elementor	Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-5553	2025-01-16 11:38	2024-06-12	Show	GitHub Exploit DB Packet Storm

1860	4.3	警告 Network	servit	affiliate-toolkit	servit の WordPress 用 affiliate-toolkit における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-2298	2025-01-16 11:32	2024-03-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281021	-	francisco_burzi	php-nuke	Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1803	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281022	-	npds	npds	Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1804	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281023	-	dacode	dacode	Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1805	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281024	-	drupal	drupal	Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1806	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281025	-	phpwebsite	phpwebsite	Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1807	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281026	-	zack_coburn	meunity_community_system	Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic.	NVD-CWE-Other	CVE-2002-1808	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281027	-	belkin	f5d6130_wnap	Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests.	NVD-CWE-Other	CVE-2002-1811	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281028	-	gdam	gdam	Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.	NVD-CWE-Other	CVE-2002-1812	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281029	-	aol	instant_messenger	Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.	NVD-CWE-Other	CVE-2002-1813	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

281030	-	gnome mandrakesoft redhat slackware	bonobo mandrake_linux linux slackware_linux	Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.	NVD-CWE-Other	CVE-2002-1814	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed