Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 4:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
261 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-2895 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
262 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC7 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC7 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-2902 2025-01-23 11:24 2024-03-26 Show GitHub Exploit DB Packet Storm
263 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. fh1203 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の fh1203 ファームウェアにおけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション 		CVE-2024-2991 2025-01-23 11:21 2024-03-27 Show GitHub Exploit DB Packet Storm
264 5.4 警告
Network 		Themeisle otter blocks ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3344 2025-01-23 11:21 2024-04-11 Show GitHub Exploit DB Packet Storm
265 8.8 重要
Network 		StylemixThemes MasterStudy LMS StylemixThemes の WordPress 用 MasterStudy LMS におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-37093 2025-01-23 11:21 2024-06-3 Show GitHub Exploit DB Packet Storm
266 4.2 警告
Local 		SAP SAP GUI for Windows SAP の SAP GUI for Windows における脆弱性 New CWE-200
CWE-Other
CVE-2024-39600 2025-01-23 11:21 2024-07-9 Show GitHub Exploit DB Packet Storm
267 5.4 警告
Network 		bdthemes element pack bdthemes の WordPress 用 element pack におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2024-47392 2025-01-23 11:21 2024-10-5 Show GitHub Exploit DB Packet Storm
268 5.4 警告
Network 		moveaddons move addons for elementor moveaddons の WordPress 用 move addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-56254 2025-01-23 11:21 2024-12-18 Show GitHub Exploit DB Packet Storm
269 9.8 緊急
Network 		code-projects Online  Shoe Store code-projects の Online Shoe Store における SQL インジェクションの脆弱性 New CWE-74
CWE-89
CWE-89
CVE-2025-0204 2025-01-23 11:21 2025-01-4 Show GitHub Exploit DB Packet Storm
270 9.8 緊急
Network 		The Biosig Project
Fedora Project		 libbiosig
Fedora 		The Biosig Project の libbiosig 等複数ベンダの製品における境界外書き込みに関する脆弱性 New CWE-131
CWE-787
CVE-2024-23606 2025-01-23 11:18 2024-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
791 - - - A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file … - CVE-2025-0533 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
792 6.5 MEDIUM
Network 		fortinet fortios A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial… CWE-476
 NULL Pointer Dereference 		CVE-2023-42786 2025-01-18 05:42 2025-01-14 Show GitHub Exploit DB Packet Storm
793 6.5 MEDIUM
Network 		fortinet fortios A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial… CWE-476
 NULL Pointer Dereference 		CVE-2023-42785 2025-01-18 05:42 2025-01-14 Show GitHub Exploit DB Packet Storm
794 7.8 HIGH
Local 		microsoft autoupdate Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2025-21360 2025-01-18 05:40 2025-01-15 Show GitHub Exploit DB Packet Storm
795 7.8 HIGH
Local 		microsoft office
outlook 		Microsoft Outlook Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2025-21361 2025-01-18 05:39 2025-01-15 Show GitHub Exploit DB Packet Storm
796 8.4 HIGH
Local 		microsoft 365_apps
office
excel
office_online_server 		Microsoft Excel Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2025-21362 2025-01-18 05:38 2025-01-15 Show GitHub Exploit DB Packet Storm
797 7.8 HIGH
Local 		adobe substance_3d_stager Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … CWE-787
 Out-of-bounds Write 		CVE-2025-21132 2025-01-18 05:37 2025-01-15 Show GitHub Exploit DB Packet Storm
798 7.8 HIGH
Local 		adobe substance_3d_stager Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … CWE-787
 Out-of-bounds Write 		CVE-2025-21131 2025-01-18 05:37 2025-01-15 Show GitHub Exploit DB Packet Storm
799 7.8 HIGH
Local 		adobe substance_3d_stager Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … CWE-787
 Out-of-bounds Write 		CVE-2025-21130 2025-01-18 05:37 2025-01-15 Show GitHub Exploit DB Packet Storm
800 7.8 HIGH
Local 		adobe substance_3d_stager Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… CWE-787
 Out-of-bounds Write 		CVE-2025-21129 2025-01-18 05:37 2025-01-15 Show GitHub Exploit DB Packet Storm