Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1881	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel におけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2024-26873	2025-01-15 17:49	2024-01-24	Show	GitHub Exploit DB Packet Storm

1882	7.8	重要 Local	Linux Debian	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2023-52691	2025-01-15 17:47	2023-12-14	Show	GitHub Exploit DB Packet Storm

1883	7.8	重要 Local	Linux Debian	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2023-52679	2025-01-15 17:44	2023-12-29	Show	GitHub Exploit DB Packet Storm

1884	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2012 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microso…	Windows Telephony Server の特権の昇格の脆弱性	CWE-416 CWE-noinfo	CVE-2024-26230	2025-01-15 17:41	2024-04-9	Show	GitHub Exploit DB Packet Storm

1885	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性	CWE-noinfo 情報不足	CVE-2023-52476	2025-01-15 17:41	2023-10-8	Show	GitHub Exploit DB Packet Storm

1886	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel におけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2021-47349	2025-01-15 17:39	2021-06-11	Show	GitHub Exploit DB Packet Storm

1887	6.6	警告 Network	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Windows Server 2022	Windows DNS サーバーのリモートでコードが実行される脆弱性	CWE-416 CWE-noinfo	CVE-2024-26224	2025-01-15 17:39	2024-04-9	Show	GitHub Exploit DB Packet Storm

1888	7.4	重要 Local	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2012 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microso…	セキュアブートのセキュリティ機能のバイパスの脆弱性	CWE-347 CWE-noinfo	CVE-2024-26194	2025-01-15 17:37	2024-04-9	Show	GitHub Exploit DB Packet Storm

1889	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性	CWE-noinfo 情報不足	CVE-2021-47047	2025-01-15 17:37	2021-04-16	Show	GitHub Exploit DB Packet Storm

1890	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2012 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microso…	Windows ルーティングとリモートアクセスサービス (RRAS) のリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2024-26179	2025-01-15 17:35	2024-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
171	-		-	-	Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens on TCP port 3009 by default. New	-	CVE-2023-46271	2025-02-21 01:15	2025-02-20	Show	GitHub Exploit DB Packet Storm

172	-		-	-	Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings. New	-	CVE-2020-35546	2025-02-21 01:15	2025-02-20	Show	GitHub Exploit DB Packet Storm

173	-		-	-	Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information. New	-	CVE-2020-13481	2025-02-21 01:15	2025-02-20	Show	GitHub Exploit DB Packet Storm

174	-		-	-	Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device. New	-	CVE-2020-10095	2025-02-21 01:15	2025-02-20	Show	GitHub Exploit DB Packet Storm

175	7.5	HIGH Network	enituretechnology	ltl_freight_quotes	The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insuffi… Update	CWE-89 SQL Injection	CVE-2024-13490	2025-02-21 01:14	2025-02-12	Show	GitHub Exploit DB Packet Storm

176	7.5	HIGH Network	enituretechnology	small_package_quotes	The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the… Update	CWE-89 SQL Injection	CVE-2024-13475	2025-02-21 01:10	2025-02-12	Show	GitHub Exploit DB Packet Storm

177	8.8	HIGH Network	apusthemes	superio	The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' functio… Update	CWE-862 Missing Authorization	CVE-2024-12296	2025-02-21 01:09	2025-02-12	Show	GitHub Exploit DB Packet Storm

178	9.8	CRITICAL Network	apusthemes	superio	The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the 'role' field when… Update	CWE-266 Incorrect Privilege Assignment	CVE-2024-12213	2025-02-21 01:08	2025-02-12	Show	GitHub Exploit DB Packet Storm

179	-		-	-	Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024… New	-	CVE-2025-20059	2025-02-21 00:15	2025-02-21	Show	GitHub Exploit DB Packet Storm

180	-		-	-	SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function. New	-	CVE-2024-57401	2025-02-21 00:15	2025-02-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed