Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
11 9.8 緊急
Network 		huayi-tec jeewms JeeWMS におけるパストラバーサルの脆弱性 New CWE-22
CWE-27
CVE-2024-27764 2025-01-22 17:27 2024-03-5 Show GitHub Exploit DB Packet Storm
12 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server&… 		Windows リモート デスクトップ サービスのサービス拒否の脆弱性 New CWE-400
CWE-noinfo
CVE-2025-21330 2025-01-22 17:26 2025-01-14 Show GitHub Exploit DB Packet Storm
13 7.8 重要
Local 		マイクロソフト Microsoft Office
Microsoft 365 Apps
Microsoft Office Online Server 		Microsoft Excel のリモートでコードが実行される脆弱性 New CWE-822
CWE-noinfo
CVE-2025-21354 2025-01-22 17:26 2025-01-14 Show GitHub Exploit DB Packet Storm
14 6.7 警告
Local 		マイクロソフト Microsoft Office
Microsoft 365 Apps
Microsoft Outlook 		Microsoft Outlook のリモートでコードが実行される脆弱性 New CWE-908
CWE-noinfo
CVE-2025-21357 2025-01-22 17:26 2025-01-14 Show GitHub Exploit DB Packet Storm
15 4.9 警告
Network 		ZyXEL DX5401-B1 ファームウェア
DX3300-T0 ファームウェア
ex5401-b0 ファームウェア
EX5600-T1 ファームウェア
DX4510-B1 ファームウェア
EX5401-B1 ファームウェア
EX3510-B1 ファームウェア
EX3510-B0 ファ… 		複数の ZyXEL 製品における古典的バッファオーバーフローの脆弱性 New CWE-120
古典的バッファオーバーフロー 		CVE-2024-9197 2025-01-22 17:20 2024-12-3 Show GitHub Exploit DB Packet Storm
16 5.3 警告
Network 		Fortra FileCatalyst Direct Fortra の FileCatalyst Direct におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CVE-2024-25154 2025-01-22 17:17 2024-03-13 Show GitHub Exploit DB Packet Storm
17 9.8 緊急
Network 		The Biosig Project
Fedora Project		 libbiosig
Fedora 		The Biosig Project の libbiosig 等複数ベンダの製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2024-23305 2025-01-22 17:15 2024-02-20 Show GitHub Exploit DB Packet Storm
18 9.8 緊急
Network 		dirk1983 chatgpt-wechat-personal dirk1983 の chatgpt-wechat-personal におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
CWE-918
CVE-2024-27565 2025-01-22 17:08 2024-03-5 Show GitHub Exploit DB Packet Storm
19 5.4 警告
Network 		Gonahkar Custom fields shortcode Gonahkar の WordPress 用 Custom fields shortcode におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2023-6809 2025-01-22 17:05 2023-12-13 Show GitHub Exploit DB Packet Storm
20 5.4 警告
Network 		Savvy Wordpress Development MyWaze Savvy Wordpress Development の WordPress 用 MyWaze におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25594 2025-01-22 17:03 2024-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 - - - Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability could allow an attacker to modify a single email to contain upper and lower case characters in order to access the ap… New CWE-22
Path Traversal 		CVE-2025-0614 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
502 - - - In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, on… New - CVE-2024-57938 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
503 - - - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now… New - CVE-2024-57936 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
504 - - - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it fails to modify QP to RTR, dip_ctx will not be attached. And d… New - CVE-2024-57935 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
505 - - - In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existen… New - CVE-2024-57933 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
506 - - - In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling … New - CVE-2024-57931 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
507 - - - In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READ_ONCE() when accessing fgraph_array[] In __ftrace_return_to_handler(), a loop iterates over the fgraph_array[] el… New - CVE-2024-57934 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
508 - - - In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and t… New - CVE-2024-57932 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
509 - - - In the Linux kernel, the following vulnerability has been resolved: tracing: Have process_string() also allow arrays In order to catch a common bug where a TRACE_EVENT() TP_fast_assign() assigns an… New - CVE-2024-57930 2025-01-21 21:15 2025-01-21 Show GitHub Exploit DB Packet Storm
510 6.4 MEDIUM
Network 		- - The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitizat… New CWE-79
Cross-site Scripting 		CVE-2025-0450 2025-01-21 20:15 2025-01-21 Show GitHub Exploit DB Packet Storm