Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1981 7.5 重要
Network 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-200
CWE-noinfo
CVE-2024-56443 2025-01-15 13:48 2024-12-26 Show GitHub Exploit DB Packet Storm
1982 6.8 警告
Physics 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows 11 		Windows モバイル ブロードバンド ドライバーのリモート コード実行に対する脆弱性 CWE-190
CWE-noinfo
CVE-2024-30012 2025-01-15 13:47 2024-05-14 Show GitHub Exploit DB Packet Storm
1983 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-120
CWE-noinfo
CVE-2024-56452 2025-01-15 13:38 2024-12-26 Show GitHub Exploit DB Packet Storm
1984 6.4 警告
Network 		Themeisle RSS Aggregator by Feedzy ThemeIsle の WordPress 用 RSS Aggregator by Feedzy におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2023-6805 2025-01-15 13:38 2023-12-13 Show GitHub Exploit DB Packet Storm
1985 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2489 2025-01-15 13:38 2024-03-15 Show GitHub Exploit DB Packet Storm
1986 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2024-2982 2025-01-15 13:38 2024-03-27 Show GitHub Exploit DB Packet Storm
1987 7.5 重要
Network 		Huawei HarmonyOS
EMUI 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-20
CWE-noinfo
CVE-2024-54100 2025-01-15 13:38 2024-12-12 Show GitHub Exploit DB Packet Storm
1988 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-120
CWE-noinfo
CVE-2024-56455 2025-01-15 13:38 2024-12-26 Show GitHub Exploit DB Packet Storm
1989 9.8 緊急
Network 		クアルコム QCA6574 ファームウェア
QCA6595 ファームウェア
qca6678aq ファームウェア
qam8255p ファームウェア
QCA6174A ファームウェア
QCA6574AU ファームウェア
qamsrv1h ファームウェア
QCA6574A ファームウェア 		複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2024-21463 2025-01-15 13:36 2024-04-1 Show GitHub Exploit DB Packet Storm
1990 8.8 重要
Network 		Synology Inc. Surveillance Station Synology Inc. の Surveillance Station における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-29239 2025-01-15 13:36 2024-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 - - - Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions when converting a user to a bot, with allows the converted user to escalate their privileges depending on… New - CVE-2025-1412 2025-02-24 17:15 2025-02-24 Show GitHub Exploit DB Packet Storm
92 6.1 MEDIUM
Physics 		- - The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the ne… New CWE-787
 Out-of-bounds Write 		CVE-2025-0690 2025-02-24 17:15 2025-02-24 Show GitHub Exploit DB Packet Storm
93 3.5 LOW
Adjacent 		- - A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is an unknown function of the component One-Time Password Hand… New CWE-307
CWE-799
mproper Restriction of Excessive Authentication Attempts
 Improper Control of Interaction Frequency 		CVE-2025-1629 2025-02-24 14:15 2025-02-24 Show GitHub Exploit DB Packet Storm
94 4.3 MEDIUM
Network 		- - A vulnerability has been found in vTiger CRM 6.4.0 and classified as problematic. This vulnerability affects unknown code of the file /modules/Mobile/index.php. The manipulation of the argument _oper… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1618 2025-02-24 14:15 2025-02-24 Show GitHub Exploit DB Packet Storm
95 2.4 LOW
Network 		- - A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID lead… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1617 2025-02-24 13:15 2025-02-24 Show GitHub Exploit DB Packet Storm
96 4.7 MEDIUM
Network 		- - A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this issue is some unknown functionality of the component Diagnosis. The manipul… New CWE-78
CWE-77
OS Command 
Command Injection 		CVE-2025-1616 2025-02-24 13:15 2025-02-24 Show GitHub Exploit DB Packet Storm
97 2.4 LOW
Network 		- - A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation … New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1615 2025-02-24 13:15 2025-02-24 Show GitHub Exploit DB Packet Storm
98 2.4 LOW
Network 		- - A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwardin… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1614 2025-02-24 12:15 2025-02-24 Show GitHub Exploit DB Packet Storm
99 2.4 LOW
Network 		- - A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URL_filterCfg of the component URL … New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1613 2025-02-24 12:15 2025-02-24 Show GitHub Exploit DB Packet Storm
100 3.5 LOW
Network 		- - A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SS… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1612 2025-02-24 12:15 2025-02-24 Show GitHub Exploit DB Packet Storm