Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 12:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
11 2
Physics
rensas arm-trusted-firmware ルネサス エレクトロニクス株式会社の arm-trusted-firmware における整数オーバーフローの脆弱性 New CWE-190
CWE-190
CVE-2024-1633 2025-01-27 11:06 2024-02-19 Show GitHub Exploit DB Packet Storm
12 5.4 警告
Network
exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2503 2025-01-27 11:06 2024-05-2 Show GitHub Exploit DB Packet Storm
13 9.8 緊急
Network
Sapplica Sentrifugo Sapplica の Sentrifugo における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-29875 2025-01-27 11:06 2024-03-21 Show GitHub Exploit DB Packet Storm
14 6.1 警告
Network
Sapplica Sentrifugo Sapplica の Sentrifugo におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-29878 2025-01-27 11:06 2024-03-21 Show GitHub Exploit DB Packet Storm
15 6.5 警告
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-3131 2025-01-27 11:06 2024-04-1 Show GitHub Exploit DB Packet Storm
16 5.4 警告
Network
oretnom23 computer laboratory management system oretnom23 の computer laboratory management system におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3140 2025-01-27 11:06 2024-04-1 Show GitHub Exploit DB Packet Storm
17 5.4 警告
Network
moveaddons move addons for elementor moveaddons の WordPress 用 move addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-4695 2025-01-27 11:06 2024-05-21 Show GitHub Exploit DB Packet Storm
18 4.4 警告
Local
デル vxrail g560 vcf ファームウェア
vxrail e460 ファームウェア
vxrail e560 ファームウェア
vxrail e660 ファームウェア
vxrail e665f ファームウェア
vxrail g560 ファ…
複数のデル製品における認証情報の不十分な保護に関する脆弱性 New CWE-256
CWE-522
CVE-2025-21102 2025-01-27 11:06 2025-01-8 Show GitHub Exploit DB Packet Storm
19 6.5 警告
Network
Palo Alto Networks PAN-OS Palo Alto Networks の PAN-OS における XML 外部エンティティの脆弱性 New CWE-611
CWE-611
CVE-2024-5919 2025-01-27 11:06 2024-11-14 Show GitHub Exploit DB Packet Storm
20 8.8 重要
Network
EBM Technologies Uniweb/SoliPACS WebServer EBM Technologies の Uniweb/SoliPACS WebServer における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-26262 2025-01-27 10:59 2024-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
671 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faaiq Ahmed, Technial Architect,faaiqsj@gmail.com Simple Custom post type custom field allows Ref… CWE-79
Cross-site Scripting
CVE-2025-23500 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
672 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Translation.Pro allows Reflected XSS. This issue affects Translation.Pro: from n/a throu… CWE-79
Cross-site Scripting
CVE-2025-23498 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
673 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WooCommerce Order Search allows Reflected XSS. This issue affects WooCommerce Order Sear… CWE-79
Cross-site Scripting
CVE-2025-23495 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
674 - - - Missing Authorization vulnerability in NotFound Database Sync allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Database Sync: from n/a through 0.5.1. CWE-862
 Missing Authorization
CVE-2025-23486 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
675 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound History timeline allows Reflected XSS. This issue affects History timeline: from n/a thr… CWE-79
Cross-site Scripting
CVE-2025-23475 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
676 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound FWD Slider allows Reflected XSS. This issue affects FWD Slider: from n/a through 1.0. CWE-79
Cross-site Scripting
CVE-2025-23462 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
677 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Simple shortcode buttons allows Reflected XSS. This issue affects Simple shortcode butto… CWE-79
Cross-site Scripting
CVE-2025-23449 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
678 - - - A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php. - CVE-2025-22980 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
679 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Mapbox for WP Advanced allows Reflected XSS. This issue affects Mapbox for WP Advanced: … CWE-79
Cross-site Scripting
CVE-2025-22772 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm
680 5.4 MEDIUM
Network
- - A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability… CWE-287
Improper Authentication
CVE-2025-0604 2025-01-23 00:15 2025-01-23 Show GitHub Exploit DB Packet Storm