Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 6:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
271 5.5 警告
Local 		クアルコム SD 205 ファームウェア
SD 632 ファームウェア
SD 212 ファームウェア
SD 625 ファームウェア
SD 430 ファームウェア
MDM9206 ファームウェア
MDM9607 ファームウェア
SD 450… 		複数のクアルコム製品における脆弱性 New CWE-16
CWE-noinfo
CVE-2018-11922 2025-01-15 15:37 2018-06-7 Show GitHub Exploit DB Packet Storm
272 9.8 緊急
Network 		マイクロソフト Microsoft Partner Center Partner.Microsoft.Com の特権昇格の脆弱性 New CWE-269
CWE-Other
CVE-2024-49035 2025-01-15 15:32 2024-11-26 Show GitHub Exploit DB Packet Storm
273 8.8 重要
Network 		Gym Management System project Gym Management System codezips の Gym Management System における SQL インジェクションの脆弱性 New CWE-74
CWE-89
CWE-89
CVE-2025-0231 2025-01-15 15:25 2025-01-5 Show GitHub Exploit DB Packet Storm
274 9.8 緊急
Network 		Projectworlds Travel Management System fabianros の Travel Management System における SQL インジェクションの脆弱性 New CWE-74
CWE-89
CWE-89
CVE-2025-0229 2025-01-15 15:21 2025-01-5 Show GitHub Exploit DB Packet Storm
275 9.8 緊急
Network 		campcodes Complete Student Grading System campcodes の Complete Student Grading System における SQL インジェクションの脆弱性 New CWE-74
CWE-89
CWE-89
CVE-2025-0212 2025-01-15 15:12 2025-01-4 Show GitHub Exploit DB Packet Storm
276 7.5 重要
Network 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における脆弱性 New CWE-227
CWE-noinfo
CVE-2024-56442 2025-01-15 15:04 2024-12-26 Show GitHub Exploit DB Packet Storm
277 7.5 重要
Network 		クアルコム QCA8081 ファームウェア
QCA6431 ファームウェア
qca6698aq ファームウェア
fastconnect 6900 ファームウェア
QCA6595AU ファームウェア
QCA6421 ファームウェア
QCA8337 ファームウェア
QCA6574A … 		複数のクアルコム製品における不正な型変換に関する脆弱性 New CWE-704
CWE-704
CVE-2023-33101 2025-01-15 15:01 2023-05-17 Show GitHub Exploit DB Packet Storm
278 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-2485 2025-01-15 15:01 2024-03-15 Show GitHub Exploit DB Packet Storm
279 5.4 警告
Network 		oretnom23 Laundry Shop Management System Oretnom23 の Laundry Shop Management System におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3463 2025-01-15 15:01 2024-04-8 Show GitHub Exploit DB Packet Storm
280 7.2 重要
Network 		BeyondTrust Corporation remote support
privileged remote access 		BeyondTrust Corporation の privileged remote access および remote support における OS コマンドインジェクションの脆弱性 New CWE-78
CWE-78
CVE-2024-12686 2025-01-15 15:01 2024-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 17, 2025, 5:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 - - - TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is… New CWE-352
CWE-749
 Origin Validation Error
 Exposed Dangerous Method or Function 		CVE-2024-55894 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
352 - - - TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is… New CWE-352
CWE-749
 Origin Validation Error
 Exposed Dangerous Method or Function 		CVE-2024-55893 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
353 - - - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfile Extension allows Functionality Misuse.This issue affects Mediawiki - SocialP… New - CVE-2025-23074 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
354 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - RefreshSpecial Extension allows Cross-Site Scripting (XSS… New - CVE-2025-23072 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
355 - - - Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This is… New CWE-20
 Improper Input Validation  		CVE-2025-23041 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
356 7.8 HIGH
Local 		- - Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… New CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2025-21134 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
357 7.8 HIGH
Local 		- - Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… New CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2025-21133 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
358 7.8 HIGH
Local 		- - Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … New CWE-787
 Out-of-bounds Write 		CVE-2025-21132 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
359 7.8 HIGH
Local 		- - Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … New CWE-787
 Out-of-bounds Write 		CVE-2025-21131 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm
360 7.8 HIGH
Local 		- - Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … New CWE-787
 Out-of-bounds Write 		CVE-2025-21130 2025-01-15 04:15 2025-01-15 Show GitHub Exploit DB Packet Storm