Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1981 7.5 重要
Network 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-200
CWE-noinfo
CVE-2024-56443 2025-01-15 13:48 2024-12-26 Show GitHub Exploit DB Packet Storm
1982 6.8 警告
Physics 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows 11 		Windows モバイル ブロードバンド ドライバーのリモート コード実行に対する脆弱性 CWE-190
CWE-noinfo
CVE-2024-30012 2025-01-15 13:47 2024-05-14 Show GitHub Exploit DB Packet Storm
1983 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-120
CWE-noinfo
CVE-2024-56452 2025-01-15 13:38 2024-12-26 Show GitHub Exploit DB Packet Storm
1984 6.4 警告
Network 		Themeisle RSS Aggregator by Feedzy ThemeIsle の WordPress 用 RSS Aggregator by Feedzy におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2023-6805 2025-01-15 13:38 2023-12-13 Show GitHub Exploit DB Packet Storm
1985 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2489 2025-01-15 13:38 2024-03-15 Show GitHub Exploit DB Packet Storm
1986 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2024-2982 2025-01-15 13:38 2024-03-27 Show GitHub Exploit DB Packet Storm
1987 7.5 重要
Network 		Huawei HarmonyOS
EMUI 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-20
CWE-noinfo
CVE-2024-54100 2025-01-15 13:38 2024-12-12 Show GitHub Exploit DB Packet Storm
1988 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-120
CWE-noinfo
CVE-2024-56455 2025-01-15 13:38 2024-12-26 Show GitHub Exploit DB Packet Storm
1989 9.8 緊急
Network 		クアルコム QCA6574 ファームウェア
QCA6595 ファームウェア
qca6678aq ファームウェア
qam8255p ファームウェア
QCA6174A ファームウェア
QCA6574AU ファームウェア
qamsrv1h ファームウェア
QCA6574A ファームウェア 		複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2024-21463 2025-01-15 13:36 2024-04-1 Show GitHub Exploit DB Packet Storm
1990 8.8 重要
Network 		Synology Inc. Surveillance Station Synology Inc. の Surveillance Station における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-29239 2025-01-15 13:36 2024-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 - - - PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters of index.php page. New - CVE-2023-51338 2025-02-22 07:15 2025-02-21 Show GitHub Exploit DB Packet Storm
52 - - - PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index. New - CVE-2023-51337 2025-02-22 07:15 2025-02-21 Show GitHub Exploit DB Packet Storm
53 - - - PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation… New - CVE-2023-51336 2025-02-22 07:15 2025-02-21 Show GitHub Exploit DB Packet Storm
54 - - - Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross-Site Scripting (XSS). New - CVE-2024-54959 2025-02-22 07:15 2025-02-21 Show GitHub Exploit DB Packet Storm
55 - - - Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which ar… New - CVE-2024-54958 2025-02-22 07:15 2025-02-21 Show GitHub Exploit DB Packet Storm
56 - - - PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on La… New - CVE-2023-51333 2025-02-22 07:15 2025-02-21 Show GitHub Exploit DB Packet Storm
57 - - - RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding. An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-25282 2025-02-22 06:15 2025-02-22 Show GitHub Exploit DB Packet Storm
58 7.3 HIGH
Network 		- - A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability affects the function saveImage. The manipulation of the argument file leads to unr… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-1555 2025-02-22 06:15 2025-02-22 Show GitHub Exploit DB Packet Storm
59 - - - Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua. New - CVE-2025-25605 2025-02-22 06:15 2025-02-22 Show GitHub Exploit DB Packet Storm
60 - - - Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua. New - CVE-2025-25604 2025-02-22 06:15 2025-02-22 Show GitHub Exploit DB Packet Storm