Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
181 5.5 警告
Local 		Linux
Debian		 Debian GNU/Linux
Linux Kernel 		Linux の Linux Kernel 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-26855 2025-01-10 10:32 2024-03-5 Show GitHub Exploit DB Packet Storm
182 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-47019 2025-01-10 10:27 2021-04-21 Show GitHub Exploit DB Packet Storm
183 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2021-47014 2025-01-10 10:25 2021-04-26 Show GitHub Exploit DB Packet Storm
184 4.7 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-47001 2025-01-10 10:22 2021-04-26 Show GitHub Exploit DB Packet Storm
185 3.3 低
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-46971 2025-01-10 10:20 2021-03-16 Show GitHub Exploit DB Packet Storm
186 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-46969 2025-01-10 10:16 2021-03-10 Show GitHub Exploit DB Packet Storm
187 4.3 警告
Network 		IBM IBM App Connect Enterprise IBM の IBM App Connect Enterprise における有効期限後または解放後のリソースの操作に関する脆弱性 CWE-324
CWE-672
CVE-2024-31894 2025-01-10 10:05 2024-05-22 Show GitHub Exploit DB Packet Storm
188 5.4 警告
Network 		IBM IBM Planning Analytics Local IBM の IBM Planning Analytics Local におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-31907 2025-01-10 10:05 2024-05-30 Show GitHub Exploit DB Packet Storm
189 3.3 低
Local 		IBM IBM Aspera Console IBM の IBM Aspera Console における脆弱性 CWE-525
CWE-Other
CVE-2022-43841 2025-01-10 10:04 2022-10-26 Show GitHub Exploit DB Packet Storm
190 5.4 警告
Network 		BoldThemes Bold Page Builder BoldThemes の WordPress 用 Bold Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2736 2025-01-9 18:24 2024-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 - - - WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerabilit… New CWE-79
Cross-site Scripting 		CVE-2025-22597 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
252 - - - WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the modulos_visiveis.php endpoint of the WeGIA application. This vulnerabili… New CWE-79
Cross-site Scripting 		CVE-2025-22596 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
253 - - - Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execut… New CWE-22
CWE-94
CWE-434
Path Traversal
Code Injection
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-22152 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
254 - - - DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause t… New CWE-289
 Authentication Bypass by Alternate Name 		CVE-2024-56511 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
255 - - - Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions. New - CVE-2024-50807 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
256 - - - An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. New - CVE-2024-46210 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
257 - - - Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals. New - CVE-2024-29971 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
258 - - - Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals. New - CVE-2024-29970 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
259 - - - Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions. New - CVE-2024-25371 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm
260 - - - FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. New - CVE-2025-23022 2025-01-11 01:15 2025-01-11 Show GitHub Exploit DB Packet Storm