Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251 6.7 警告
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		プロキシ ドライバ スプーフィングの脆弱性 CWE-284
CWE-noinfo
CVE-2024-26234 2025-01-10 17:49 2024-04-9 Show GitHub Exploit DB Packet Storm
252 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		Windows CSC サービスの特権の昇格の脆弱性 CWE-122
CWE-noinfo
CVE-2024-26229 2025-01-10 17:47 2024-04-9 Show GitHub Exploit DB Packet Storm
253 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		HTTP.sys のサービス拒否の脆弱性 CWE-476
CWE-noinfo
CVE-2024-26219 2025-01-10 17:45 2024-04-9 Show GitHub Exploit DB Packet Storm
254 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		Windows カーネルの特権の昇格の脆弱性 CWE-367
CWE-noinfo
CVE-2024-26218 2025-01-10 17:42 2024-04-9 Show GitHub Exploit DB Packet Storm
255 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows Remote Access Connection Manager の特権の昇格の脆弱性 CWE-122
CWE-noinfo
CVE-2024-26211 2025-01-10 17:40 2024-04-9 Show GitHub Exploit DB Packet Storm
256 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows Remote Access Connection Manager の情報漏えいの脆弱性 CWE-125
CWE-noinfo
CVE-2024-26207 2025-01-10 17:38 2024-04-9 Show GitHub Exploit DB Packet Storm
257 7 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		Windows USB プリント ドライバーの特権の昇格の脆弱性 CWE-126
CWE-362
CVE-2024-26243 2025-01-10 17:37 2024-04-9 Show GitHub Exploit DB Packet Storm
258 6.5 警告
Network 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		Windows Kerberos のサービス拒否の脆弱性 CWE-476
CWE-noinfo
CVE-2024-26183 2025-01-10 17:36 2024-04-9 Show GitHub Exploit DB Packet Storm
259 8 重要
Adjacent 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-121
CWE-noinfo
CVE-2024-26180 2025-01-10 17:34 2024-04-9 Show GitHub Exploit DB Packet Storm
260 8 重要
Adjacent 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-20
CWE-noinfo
CVE-2024-26240 2025-01-10 17:32 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 - - - MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit. - CVE-2024-54997 2025-01-11 06:15 2025-01-11 Show GitHub Exploit DB Packet Storm
202 - - - MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the first_name and last_name parameters in the Add a new relationship feature. - CVE-2024-54994 2025-01-11 06:15 2025-01-11 Show GitHub Exploit DB Packet Storm
203 8.8 HIGH
Network 		wangl1989 mysiteforme A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileC… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-13139 2025-01-11 06:02 2025-01-5 Show GitHub Exploit DB Packet Storm
204 8.8 HIGH
Network 		wangl1989 mysiteforme A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/Loc… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-13138 2025-01-11 06:01 2025-01-5 Show GitHub Exploit DB Packet Storm
205 5.4 MEDIUM
Network 		wangl1989 mysiteforme A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system… CWE-79
Cross-site Scripting 		CVE-2024-13137 2025-01-11 06:01 2025-01-5 Show GitHub Exploit DB Packet Storm
206 9.8 CRITICAL
Network 		wangl1989 mysiteforme A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/Shir… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-13136 2025-01-11 06:01 2025-01-5 Show GitHub Exploit DB Packet Storm
207 - - - On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- c… - CVE-2024-6437 2025-01-11 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
208 - - - Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users - CVE-2024-33299 2025-01-11 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
209 - - - Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function - CVE-2024-33297 2025-01-11 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
210 - - - NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending craf… - CVE-2024-12847 2025-01-11 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm