Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 4:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
11 7.8 重要
Local
マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2025
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability New CWE-416
解放済みメモリの使用
CVE-2025-21335 2025-01-16 15:43 2025-01-14 Show GitHub Exploit DB Packet Storm
12 7.3 重要
Local
マイクロソフト Azure Data Studio Azure Data Studio の特権の昇格の脆弱性 New CWE-284
CWE-noinfo
CVE-2024-26203 2025-01-16 15:38 2024-03-12 Show GitHub Exploit DB Packet Storm
13 8.8 重要
Network
マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-209
CWE-noinfo
CVE-2024-28939 2025-01-16 15:34 2024-04-9 Show GitHub Exploit DB Packet Storm
14 8.8 重要
Network
マイクロソフト Microsoft OLE DB Driver
Microsoft SQL Server
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-29044 2025-01-16 15:31 2024-04-9 Show GitHub Exploit DB Packet Storm
15 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2024-53204 2025-01-16 15:25 2024-11-4 Show GitHub Exploit DB Packet Storm
16 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-Other
その他
CVE-2024-26709 2025-01-16 15:23 2024-02-14 Show GitHub Exploit DB Packet Storm
17 4.7 警告
Local
Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 New CWE-667
不適切なロック
CVE-2023-52505 2025-01-16 15:20 2023-10-6 Show GitHub Exploit DB Packet Storm
18 7.1 重要
Local
Linux Linux Kernel Linux の Linux Kernel における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2023-52501 2025-01-16 15:17 2023-09-8 Show GitHub Exploit DB Packet Storm
19 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-Other
その他
CVE-2023-52500 2025-01-16 15:14 2023-09-13 Show GitHub Exploit DB Packet Storm
20 4.3 警告
Network
LadiPage LadiPage WordPress 用 LadiPage におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反
CVE-2023-4731 2025-01-16 15:12 2023-09-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 - - - An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service. New CWE-787
 Out-of-bounds Write
CVE-2024-13165 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
412 - - - An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges. New CWE-908
 Use of Uninitialized Resource
CVE-2024-13164 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
413 - - - Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code … New CWE-502
 Deserialization of Untrusted Data
CVE-2024-13163 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
414 - - - SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code … New CWE-89
SQL Injection
CVE-2024-13162 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
415 - - - Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. New CWE-36
 Absolute Path Traversal
CVE-2024-13161 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
416 - - - Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. New CWE-36
 Absolute Path Traversal
CVE-2024-13160 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
417 - - - Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. New CWE-36
 Absolute Path Traversal
CVE-2024-13159 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
418 - - - An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to … New CWE-22
CWE-426
Path Traversal
 Untrusted Search Path
CVE-2024-13158 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
419 - - - In Apache Linkis <1.7.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will allow the attacker to re… New - CVE-2024-45627 2025-01-15 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
420 - - - Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3. Update - CVE-2024-13275 2025-01-15 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm