Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
261 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		Windows DWM Core ライブラリの情報漏えいの脆弱性 CWE-125
CWE-noinfo
CVE-2024-26172 2025-01-10 17:32 2024-04-9 Show GitHub Exploit DB Packet Storm
262 7.3 重要
Local 		マイクロソフト PowerShell
Microsoft .NET Framework
.NET
Microsoft Visual Studio 		.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CWE-416
CWE-noinfo
CVE-2024-21409 2025-01-10 17:30 2024-04-9 Show GitHub Exploit DB Packet Storm
263 7 重要
Local 		マイクロソフト Microsoft Windows Server 2022 Windows Update スタックの特権の昇格の脆弱性 CWE-362
CWE-591
CVE-2024-26236 2025-01-10 17:28 2024-04-9 Show GitHub Exploit DB Packet Storm
264 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows Server&… 		Windows カーネルの特権の昇格の脆弱性 CWE-426
CWE-noinfo
CVE-2024-20693 2025-01-10 17:26 2024-04-9 Show GitHub Exploit DB Packet Storm
265 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		Windows 暗号化サービスのセキュリティ機能のバイパスの脆弱性 CWE-310
CWE-347
CVE-2024-26228 2025-01-10 17:25 2024-04-9 Show GitHub Exploit DB Packet Storm
266 6.6 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2022 		Windows DNS サーバーのリモートでコードが実行される脆弱性 CWE-203
CWE-416
CVE-2024-26221 2025-01-10 17:19 2024-04-9 Show GitHub Exploit DB Packet Storm
267 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-56761 2025-01-10 17:18 2024-12-29 Show GitHub Exploit DB Packet Storm
268 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-56742 2025-01-10 17:16 2024-11-14 Show GitHub Exploit DB Packet Storm
269 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2024-56728 2025-01-10 17:12 2024-10-22 Show GitHub Exploit DB Packet Storm
270 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-56711 2025-01-10 17:10 2024-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 14, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0. - CVE-2024-13248 2025-01-11 07:15 2025-01-10 Show GitHub Exploit DB Packet Storm
192 - - - In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong. - CVE-2025-22376 2025-01-11 07:15 2025-01-4 Show GitHub Exploit DB Packet Storm
193 5.4 MEDIUM
Network 		osuuu lightpicture A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The ma… CWE-79
Cross-site Scripting 		CVE-2024-13141 2025-01-11 06:39 2025-01-6 Show GitHub Exploit DB Packet Storm
194 5.4 MEDIUM
Network 		emlog emlog A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Han… CWE-79
Cross-site Scripting 		CVE-2024-13140 2025-01-11 06:34 2025-01-5 Show GitHub Exploit DB Packet Storm
195 9.8 CRITICAL
Network 		code-projects online_shoe_store A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /summary.php. The manipulation of the argument tid leads … CWE-89
SQL Injection 		CVE-2025-0208 2025-01-11 06:28 2025-01-4 Show GitHub Exploit DB Packet Storm
196 9.8 CRITICAL
Network 		code-projects online_shoe_store A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The man… CWE-89
SQL Injection 		CVE-2025-0207 2025-01-11 06:27 2025-01-4 Show GitHub Exploit DB Packet Storm
197 9.8 CRITICAL
Network 		campcodes school_faculty_scheduling_system A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?act… CWE-89
SQL Injection 		CVE-2025-0210 2025-01-11 06:20 2025-01-4 Show GitHub Exploit DB Packet Storm
198 - - - On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to lea… - CVE-2024-7095 2025-01-11 06:15 2025-01-11 Show GitHub Exploit DB Packet Storm
199 - - - On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as ro… - CVE-2024-5872 2025-01-11 06:15 2025-01-11 Show GitHub Exploit DB Packet Storm
200 - - - MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:[id]/debts/create. - CVE-2024-54998 2025-01-11 06:15 2025-01-11 Show GitHub Exploit DB Packet Storm