Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
221	5.4	警告 Network	bdthemes	element pack	bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-3925	2025-01-30 09:36	2024-06-12	Show	GitHub Exploit DB Packet Storm

222	9.8	緊急 Network	netentsec	application security gateway	netentsec の application security gateway における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2024-5772	2025-01-30 09:36	2024-06-9	Show	GitHub Exploit DB Packet Storm

223	6.5	警告 Network	Rank Math	seo	Rank Math の WordPress 用 seo における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-9161	2025-01-30 09:36	2024-10-5	Show	GitHub Exploit DB Packet Storm

224	7.2	重要 Network	Rank Math	seo	Rank Math の WordPress 用 seo における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2024-9314	2025-01-30 09:35	2024-10-5	Show	GitHub Exploit DB Packet Storm

225	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows Server …	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2019-0890	2025-01-29 18:00	2019-05-14	Show	GitHub Exploit DB Packet Storm

226	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows Server …	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2019-0891	2025-01-29 18:00	2019-05-14	Show	GitHub Exploit DB Packet Storm

227	7.8	重要 Local	マイクロソフト	Microsoft Windows 10 Microsoft Windows Server	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-noinfo 情報不足	CVE-2019-0892	2025-01-29 18:00	2019-05-14	Show	GitHub Exploit DB Packet Storm

228	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows Server …	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2019-0893	2025-01-29 18:00	2019-05-14	Show	GitHub Exploit DB Packet Storm

229	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows Server …	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2019-0894	2025-01-29 18:00	2019-05-14	Show	GitHub Exploit DB Packet Storm

230	7.8	重要 Local	マイクロソフト	Microsoft Windows 8.1 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows Server …	複数の Microsoft Windows 製品におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2019-0895	2025-01-29 18:00	2019-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1281	-		-	-	An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to…	CWE-862 Missing Authorization	CVE-2024-1539	2025-02-5 19:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

1282	-		-	-	A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike th…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2023-6386	2025-02-5 19:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

1283	-		-	-	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if…	-	CVE-2023-52924	2025-02-5 19:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

1284	5.3	MEDIUM Network	-	-	The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 vi…	CWE-200 Information Exposure	CVE-2024-13829	2025-02-5 15:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

1285	-		-	-	This vulnerability allows appliance compromise at boot time.	-	CVE-2025-24507	2025-02-5 15:15	2025-01-31	Show	GitHub Exploit DB Packet Storm

1286	-		-	-	A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.	-	CVE-2025-24506	2025-02-5 15:15	2025-01-31	Show	GitHub Exploit DB Packet Storm

1287	-		-	-	This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file.	-	CVE-2025-24505	2025-02-5 15:15	2025-01-31	Show	GitHub Exploit DB Packet Storm

1288	-		-	-	NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.	-	CVE-2025-25246	2025-02-5 14:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

1289	-		-	-	Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion a…	-	CVE-2025-1026	2025-02-5 14:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

1290	-		-	-	Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter.	-	CVE-2025-1025	2025-02-5 14:15	2025-02-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed