Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206241	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0625	2011-08-4 09:12	2011-05-12	Show	GitHub Exploit DB Packet Storm

206242	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0624	2011-08-4 09:11	2011-05-12	Show	GitHub Exploit DB Packet Storm

206243	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0623	2011-08-4 09:10	2011-05-12	Show	GitHub Exploit DB Packet Storm

206244	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0622	2011-08-4 09:09	2011-05-12	Show	GitHub Exploit DB Packet Storm

206245	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0621	2011-08-4 09:09	2011-05-12	Show	GitHub Exploit DB Packet Storm

206246	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0620	2011-08-4 09:08	2011-05-12	Show	GitHub Exploit DB Packet Storm

206247	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0619	2011-08-4 09:07	2011-05-12	Show	GitHub Exploit DB Packet Storm

206248	9.3	危険	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0618	2011-08-4 09:06	2011-05-12	Show	GitHub Exploit DB Packet Storm

206249	5	警告	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-0579	2011-08-4 09:05	2011-05-12	Show	GitHub Exploit DB Packet Storm

206250	4.9	警告	オラクル	-	Oracle Solaris における Kernel/sockfs の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2290	2011-08-3 10:38	2011-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
21	-		-	-	When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffe… New	-	CVE-2025-0395	2025-01-23 01:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

22	-		-	-	In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges… New	-	CVE-2024-49735	2025-01-23 01:15	2025-01-22	Show	GitHub Exploit DB Packet Storm

23	8.2	HIGH Local	howyar signalcomputer wasay sanfong greenware cs-grp radix	sysreturn hdd_king erecoveryrx ez-back_system greenguard neo_impact smart_recovery	Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path. Update	CWE-347 Improper Verification of Cryptographic Signature	CVE-2024-7344	2025-01-23 00:41	2025-01-14	Show	GitHub Exploit DB Packet Storm

24	-		-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlaFalaki a Gateway for Pasargad Bank on WooCommerce allows Reflected XSS. This issue affects a G… New	CWE-79 Cross-site Scripting	CVE-2025-23966	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

25	-		-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Linus Lundahl Good Old Gallery allows Reflected XSS. This issue affects Good Old Gallery: from n/… New	CWE-79 Cross-site Scripting	CVE-2025-23959	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

26	-		-	-	ps_contactinfo, a PrestaShop module for displaying store contact information, has a cross-site scripting (XSS) vulnerability in versions up to and including 3.3.2. This can not be exploited in a fres… New	CWE-79 Cross-site Scripting	CVE-2025-24027	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

27	-		-	-	Unrestricted Upload of File with Dangerous Type vulnerability in Innovative Solutions user files allows Upload a Web Shell to a Web Server. This issue affects user files: from n/a through 2.4.2. New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2025-23953	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

28	-		-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges – Free Version allows PHP Local File Inc… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-23949	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

29	-		-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issu… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-23948	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

30	-		-	-	Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. New	CWE-502 Deserialization of Untrusted Data	CVE-2025-23944	2025-01-23 00:15	2025-01-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed