Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 5.5 警告
Local 		IBM IBM UrbanCode Deploy IBM の IBM UrbanCode Deploy におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2024-45091 2025-01-30 09:53 2024-12-4 Show GitHub Exploit DB Packet Storm
212 9.8 緊急
Network 		IBM Security Verify Access Docker IBM の Security Verify Access および Security Verify Access Docker における脆弱性 CWE-620
CWE-Other
CVE-2024-45647 2025-01-30 09:40 2024-11-15 Show GitHub Exploit DB Packet Storm
213 9.8 緊急
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2023-47178 2025-01-30 09:36 2023-10-31 Show GitHub Exploit DB Packet Storm
214 6.5 警告
Network 		Liferay Liferay Portal
Digital Experience Platform 		Liferay の Liferay Portal および Digital Experience Platform における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
CWE-770
CVE-2024-26265 2025-01-30 09:36 2024-02-20 Show GitHub Exploit DB Packet Storm
215 5.3 警告
Network 		Liferay Liferay Portal
Digital Experience Platform 		Liferay の Liferay Portal および Digital Experience Platform におけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 CWE-1188
CWE-1188
CVE-2024-26267 2025-01-30 09:36 2024-02-20 Show GitHub Exploit DB Packet Storm
216 5.5 警告
Local 		xpdfreader project xpdf Glyph & Cog, LLC の Xpdf における境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2024-2971 2025-01-30 09:36 2024-03-26 Show GitHub Exploit DB Packet Storm
217 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-30185 2025-01-30 09:36 2024-03-27 Show GitHub Exploit DB Packet Storm
218 5.5 警告
Local 		xpdfreader project xpdf Glyph & Cog, LLC の Xpdf における再帰制御に関する脆弱性 CWE-674
CWE-674
CVE-2024-3247 2025-01-30 09:36 2024-04-2 Show GitHub Exploit DB Packet Storm
219 5.4 警告
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-34373 2025-01-30 09:36 2024-05-6 Show GitHub Exploit DB Packet Storm
220 4.3 警告
Network 		PropertyHive PropertyHive WordPress 用 PropertyHive における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-37204 2025-01-30 09:36 2024-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 7.8 HIGH
Local 		apple macos An integer overflow was addressed through improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to elevate privileges. CWE-190
 Integer Overflow or Wraparound 		CVE-2025-24156 2025-01-31 01:43 2025-01-28 Show GitHub Exploit DB Packet Storm
1022 5.5 MEDIUM
Local 		apple iphone_os
visionos
macos
watchos
tvos
ipados 		The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a… NVD-CWE-noinfo
CVE-2025-24161 2025-01-31 01:34 2025-01-28 Show GitHub Exploit DB Packet Storm
1023 7.5 HIGH
Network 		apple ipados
iphone_os
macos 		A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. A remote attacker may be able to cause a denial-of-servic… CWE-476
 NULL Pointer Dereference 		CVE-2025-24177 2025-01-31 01:26 2025-01-28 Show GitHub Exploit DB Packet Storm
1024 - - - go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixe… CWE-248
 Uncaught Exception 		CVE-2025-24883 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1025 - - - kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The policy group feature, added to by the 1.17.0 release. By being namespaced, … CWE-285
Improper Authorization 		CVE-2025-24784 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1026 - - - kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespace… CWE-285
CWE-155
CVE-2025-24376 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1027 - - - Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kube… CWE-200
CWE-209
Information Exposure
Information Exposure Through an Error Message 		CVE-2025-23216 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1028 - - - VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plu… - CVE-2025-22222 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1029 - - - VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious scrip… - CVE-2025-22221 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1030 - - - VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform … - CVE-2025-22219 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm