Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 4.3 警告
Network 		envothemes envo's elementor templates & widgets for woocommerce envothemes の WordPress 用 envo's elementor templates & widgets for woocommerce におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-0768 2025-01-9 18:12 2024-02-28 Show GitHub Exploit DB Packet Storm
202 5.4 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1171 2025-01-9 18:11 2024-02-29 Show GitHub Exploit DB Packet Storm
203 6.4 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloper の WordPress 用 Essential Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1236 2025-01-9 18:11 2024-02-29 Show GitHub Exploit DB Packet Storm
204 6.5 警告
Network 		pagebuildersandwich page builder sandwich pagebuildersandwich の WordPress 用 page builder sandwich における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-1285 2025-01-9 18:11 2024-03-5 Show GitHub Exploit DB Packet Storm
205 6.5 警告
Network 		lunary lunary lunary におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
CWE-863
CVE-2024-1625 2025-01-9 18:11 2024-04-10 Show GitHub Exploit DB Packet Storm
206 9.1 緊急
Network 		DataEase DataEase DataEase における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
CWE-502
CVE-2024-23328 2025-01-9 18:11 2024-02-29 Show GitHub Exploit DB Packet Storm
207 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-26840 2025-01-9 18:08 2024-02-20 Show GitHub Exploit DB Packet Storm
208 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-26888 2025-01-9 18:08 2024-03-6 Show GitHub Exploit DB Packet Storm
209 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-36014 2025-01-9 18:08 2024-04-12 Show GitHub Exploit DB Packet Storm
210 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53103 2025-01-9 18:08 2024-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X-* before 7.X-1.15. New - CVE-2024-13297 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
192 - - - Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1. New - CVE-2024-13296 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
193 - - - A cross-site scripting (XSS) vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Sett… New - CVE-2024-42898 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
194 - - - Exposed Dangerous Method or Function vulnerability in Drupal Swift Mailer allows Resource Location Spoofing.This issue affects Swift Mailer: *.*. New - CVE-2024-13242 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
195 - - - Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5. New - CVE-2024-13241 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
196 - - - Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05. New - CVE-2024-13240 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
197 - - - Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0. New - CVE-2024-13239 2025-01-11 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm
198 8.8 HIGH
Network 		codezips blood_bank_management_system A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /successadmin.php. The manipulation… Update CWE-89
SQL Injection 		CVE-2025-0232 2025-01-11 02:36 2025-01-6 Show GitHub Exploit DB Packet Storm
199 4.8 MEDIUM
Network 		zerowdd studentmanager A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controlle… Update CWE-79
Cross-site Scripting 		CVE-2024-13142 2025-01-11 02:32 2025-01-6 Show GitHub Exploit DB Packet Storm
200 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from child qdisc In general, 'qlen' of any classful qdisc should keep track of the … New NVD-CWE-noinfo
CVE-2024-56770 2025-01-11 02:32 2025-01-9 Show GitHub Exploit DB Packet Storm