Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1911 8.8 重要
Network 		Synology Inc. Surveillance Station Synology Inc. の Surveillance Station における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-29237 2025-01-15 17:10 2024-03-28 Show GitHub Exploit DB Packet Storm
1912 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における整数オーバーフローの脆弱性 CWE-190
CWE-680
CVE-2024-56451 2025-01-15 17:10 2024-12-26 Show GitHub Exploit DB Packet Storm
1913 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-46999 2025-01-15 17:03 2021-04-30 Show GitHub Exploit DB Packet Storm
1914 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-47018 2025-01-15 17:03 2021-04-22 Show GitHub Exploit DB Packet Storm
1915 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-56536 2025-01-15 17:03 2024-10-31 Show GitHub Exploit DB Packet Storm
1916 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-56580 2025-01-15 17:03 2024-10-12 Show GitHub Exploit DB Packet Storm
1917 7.8 重要
Local 		クアルコム AQT1000 ファームウェア
QCA1062 ファームウェア
qcm5430 ファームウェア
fastconnect 6900 ファームウェア
QCA2064 ファームウェア
QCA2066 ファームウェア
QCA6391 ファームウェア
fastconnect … 		複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2024-45541 2025-01-15 17:02 2024-09-2 Show GitHub Exploit DB Packet Storm
1918 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-120
CWE-noinfo
CVE-2024-56456 2025-01-15 17:02 2024-12-26 Show GitHub Exploit DB Packet Storm
1919 7.5 重要
Network 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-693
CWE-Other
CVE-2024-56439 2025-01-15 17:02 2024-12-26 Show GitHub Exploit DB Packet Storm
1920 8.8 重要
Network 		Synology Inc. Surveillance Station Synology Inc. の Surveillance Station における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-29232 2025-01-15 17:02 2024-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - Cross-Site Request Forgery (CSRF) vulnerability in shisuh Related Posts Line-up-Exactly by Milliard allows Stored XSS. This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through 0… New CWE-352
 Origin Validation Error 		CVE-2025-26545 2025-02-13 23:16 2025-02-13 Show GitHub Exploit DB Packet Storm
62 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in petkivim Embed Google Map allows Stored XSS. This issue affects Embed Google Map: from n/a throug… New CWE-79
Cross-site Scripting 		CVE-2025-26539 2025-02-13 23:16 2025-02-13 Show GitHub Exploit DB Packet Storm
63 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Prezi Embedder allows Stored XSS. This issue affects Prezi Embedder: from n/a throug… New CWE-79
Cross-site Scripting 		CVE-2025-26538 2025-02-13 23:16 2025-02-13 Show GitHub Exploit DB Packet Storm
64 8.3 HIGH
Network 		- - A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipu… New CWE-488
 Exposure of Data Element to Wrong Session 		CVE-2025-1247 2025-02-13 23:16 2025-02-13 Show GitHub Exploit DB Packet Storm
65 - - - In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abu… New - CVE-2025-21700 2025-02-13 23:16 2025-02-13 Show GitHub Exploit DB Packet Storm
66 - - - Reflected Cross-Site Scripting (XSS) in Anapi Group's h6web. This security flaw could allow an attacker to inject malicious JavaScript code into a URL. When a user accesses that URL, the injected cod… New CWE-79
Cross-site Scripting 		CVE-2025-1271 2025-02-13 22:15 2025-02-13 Show GitHub Exploit DB Packet Storm
67 - - - Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-1270 2025-02-13 22:15 2025-02-13 Show GitHub Exploit DB Packet Storm
68 - - - Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve… New - CVE-2025-1094 2025-02-13 22:15 2025-02-13 Show GitHub Exploit DB Packet Storm
69 9.8 CRITICAL
Network 		- - The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_parse_request'… New CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-13182 2025-02-13 22:15 2025-02-13 Show GitHub Exploit DB Packet Storm
70 6.1 MEDIUM
Network 		- - The Listivo - Classified Ads WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 2.3.67 due to insufficient… New CWE-79
Cross-site Scripting 		CVE-2024-13867 2025-02-13 19:15 2025-02-13 Show GitHub Exploit DB Packet Storm