Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 9.1 緊急
Network 		Mitel Networks Corporation MiCollab Mitel Networks Corporation の MiCollab におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CVE-2024-41713 2025-01-9 17:29 2024-10-21 Show GitHub Exploit DB Packet Storm
202 7.8 重要
Local 		AVAST Software s.r.o. Avast Free Antivirus AVAST Software s.r.o. の Avast Free Antivirus におけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2024-7233 2025-01-9 17:29 2024-11-22 Show GitHub Exploit DB Packet Storm
203 5.4 警告
Network 		BoldThemes Bold Page Builder BoldThemes の WordPress 用 Bold Page Builder におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3266 2025-01-9 17:24 2024-04-9 Show GitHub Exploit DB Packet Storm
204 5.4 警告
Network 		leevio happy addons for elementor leevio の WordPress 用 happy addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-29108 2025-01-9 17:24 2024-03-19 Show GitHub Exploit DB Packet Storm
205 4.9 警告
Network 		ZITADEL ZITADEL ZITADEL における不正な認証に関する脆弱性 New CWE-863
CWE-863
CVE-2024-29892 2025-01-9 17:24 2024-03-27 Show GitHub Exploit DB Packet Storm
206 8.1 重要
Network 		ZITADEL ZITADEL ZITADEL における過度な認証試行の不適切な制限に関する脆弱性 New CWE-297
CWE-307
CWE-307
CVE-2024-32868 2025-01-9 17:24 2024-04-26 Show GitHub Exploit DB Packet Storm
207 6.1 警告
Network 		John Ahlquist Blue Triad EZAnalytics John Ahlquist の WordPress 用 Blue Triad EZAnalytics におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1782 2025-01-9 17:07 2024-03-5 Show GitHub Exploit DB Packet Storm
208 6.4 警告
Network 		Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2664 2025-01-9 16:55 2024-04-10 Show GitHub Exploit DB Packet Storm
209 5.4 警告
Network 		BoldThemes Bold Page Builder BoldThemes の WordPress 用 Bold Page Builder におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2734 2025-01-9 16:55 2024-04-10 Show GitHub Exploit DB Packet Storm
210 4.8 警告
Network 		Esri Portal for ArcGIS Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25696 2025-01-9 16:55 2024-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 5.5 MEDIUM
Local 		qualcomm ar8035_firmware
c-v2x_9150_firmware
csrb31024_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
msm8996au_firmware
qam8295p_firmware
qca63… 		Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. Update CWE-125
Out-of-bounds Read 		CVE-2024-33067 2025-01-11 00:39 2025-01-6 Show GitHub Exploit DB Packet Storm
22 5.5 MEDIUM
Local 		qualcomm qam8255p_firmware
qam8295p_firmware
qam8650p_firmware
qam8775p_firmware
qamsrv1h_firmware
qca6595_firmware
qca6595au_firmware
qca6696_firmware
qca6698aq_firmware
sa8255p_fi… 		information disclosure while invoking the mailbox read API. Update CWE-125
Out-of-bounds Read 		CVE-2024-43063 2025-01-11 00:37 2025-01-6 Show GitHub Exploit DB Packet Storm
23 7.8 HIGH
Local 		google android In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional e… New NVD-CWE-noinfo
CVE-2023-35685 2025-01-11 00:30 2025-01-9 Show GitHub Exploit DB Packet Storm
24 - - - Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution. New - CVE-2025-22946 2025-01-11 00:15 2025-01-11 Show GitHub Exploit DB Packet Storm
25 - - - A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "page… New - CVE-2024-57686 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
26 - - - In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal(). New - CVE-2024-57822 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
27 - - - Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2. New - CVE-2024-13288 2025-01-11 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
28 9.8 CRITICAL
Network 		- - IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, a… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2024-41787 2025-01-10 23:15 2025-01-10 Show GitHub Exploit DB Packet Storm
29 - - - In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path(). New - CVE-2024-57823 2025-01-10 23:15 2025-01-10 Show GitHub Exploit DB Packet Storm
30 - - - A vulnerability classified as problematic has been found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. This affects an unknown part of the file /web_caps/webC… Update - CVE-2024-13131 2025-01-10 23:15 2025-01-5 Show GitHub Exploit DB Packet Storm