Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2121 5.4 警告
Network 		ThimPress LearnPress ThimPress の WordPress 用 LearnPress におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2024-1289 2025-01-14 16:06 2024-04-9 Show GitHub Exploit DB Packet Storm
2122 8.8 重要
Network 		Wazuh Inc. Wazuh Wazuh Inc. の Wazuh におけるコードインジェクションの脆弱性 CWE-94
CWE-94
CVE-2023-50260 2025-01-14 16:05 2023-12-5 Show GitHub Exploit DB Packet Storm
2123 7.8 重要
Local 		クアルコム SD 450 ファームウェア
SD 615 ファームウェア
SD 616 ファームウェア
SD 810 ファームウェア
SD 212 ファームウェア
MDM9607 ファームウェア
MDM9650 ファームウェア
SD 210… 		複数のクアルコム製品における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2018-11952 2025-01-14 16:04 2018-06-7 Show GitHub Exploit DB Packet Storm
2124 7.8 重要
Local 		クアルコム SD 850 ファームウェア
SD 835 ファームウェア
MDM9206 ファームウェア
MDM9607 ファームウェア
SD 845 ファームウェア 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-20
CWE-787
CVE-2017-15832 2025-01-14 16:04 2017-10-24 Show GitHub Exploit DB Packet Storm
2125 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-47037 2025-01-14 15:59 2021-03-30 Show GitHub Exploit DB Packet Storm
2126 5.3 警告
Network 		helderk Maintenance Mode helderk の WordPress 用 Maintenance Mode における脆弱性 CWE-noinfo
情報不足 		CVE-2024-1478 2025-01-14 15:55 2024-03-5 Show GitHub Exploit DB Packet Storm
2127 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-47029 2025-01-14 15:52 2021-04-12 Show GitHub Exploit DB Packet Storm
2128 5.3 警告
Network 		Huawei NIP6300 ファームウェア
Secospace USG6600 ファームウェア
USG6000V ファームウェア
Secospace USG6300 ファームウェア
NGFW Module ファームウェア
Secospace USG6500 ファームウェア
… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2020-1820 2025-01-14 15:47 2024-12-28 Show GitHub Exploit DB Packet Storm
2129 3.3 低
Local 		Huawei P30 Pro ファームウェア Huawei の P30 Pro ファームウェアにおける脆弱性 CWE-200
CWE-noinfo
CVE-2020-9089 2025-01-14 15:47 2020-02-18 Show GitHub Exploit DB Packet Storm
2130 9.1 緊急
Network 		Huawei HarmonyOS
EMUI 		Huawei の EMUI および HarmonyOS におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2023-52953 2025-01-14 15:47 2025-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper VideoWhisper Live Streaming Integration allows Path Traversal. This issue affects VideoWhi… New CWE-22
Path Traversal 		CVE-2025-26752 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
72 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Alphabetic Pagination allows Reflected XSS. This issue affects Alphabetic Paginatio… New CWE-79
Cross-site Scripting 		CVE-2025-26751 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
73 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder allows Stored XSS. This issue affects Elementor Website Build… New CWE-79
Cross-site Scripting 		CVE-2024-54444 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
74 - - - An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system … New - CVE-2024-34036 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
75 - - - An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originat… New - CVE-2024-34035 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
76 - - - An issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertion error. An attacker must send a high number of E42 Subscrip… New - CVE-2024-34034 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
77 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-24592. Reason: This candidate is a reservation duplicate of CVE-2025-24592. Notes: All CVE users should reference … New - CVE-2024-12424 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
78 - - - `jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI). LTI13Authenticator that was introduced in `jupyterhub-ltiauthenticator` 1.3.0 wasn't validating … New CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2023-25574 2025-02-26 00:15 2025-02-26 Show GitHub Exploit DB Packet Storm
79 - - - SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component. New - CVE-2025-22974 2025-02-26 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm
80 - - - In Public Knowledge Project (PKP) OJS, OMP, and OPS before 3.3.0.21 and 3.4.x before 3.4.0.8, an XXE attack by the Journal Editor Role can create a new role as super admin in the journal context, and… New - CVE-2024-56525 2025-02-26 00:15 2025-02-25 Show GitHub Exploit DB Packet Storm