Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
21 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-2487 2025-01-15 17:17 2024-03-15 Show GitHub Exploit DB Packet Storm
22 8.8 重要
Network 		Synology Inc. Surveillance Station Synology Inc. の Surveillance Station における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-29241 2025-01-15 17:16 2024-03-28 Show GitHub Exploit DB Packet Storm
23 7.8 重要
Local 		クアルコム qcc2076 ファームウェア
WCD9385 ファームウェア
qcc2073 ファームウェア
wsa8845 ファームウェア
sc8380xp ファームウェア
wsa8845h ファームウェア
WCD9380 ファームウェア
wsa8840 ファームウェア
fastc… 		複数のクアルコム製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-126
CVE-2024-45546 2025-01-15 17:16 2024-09-2 Show GitHub Exploit DB Packet Storm
24 5.5 警告
Local 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 New CWE-120
CWE-noinfo
CVE-2024-56453 2025-01-15 17:16 2024-12-26 Show GitHub Exploit DB Packet Storm
25 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 New CWE-129
配列インデックスの不適切な検証 		CVE-2024-56608 2025-01-15 17:11 2024-10-1 Show GitHub Exploit DB Packet Storm
26 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-56697 2025-01-15 17:11 2024-11-4 Show GitHub Exploit DB Packet Storm
27 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 New CWE-667
不適切なロック 		CVE-2024-56743 2025-01-15 17:11 2024-11-18 Show GitHub Exploit DB Packet Storm
28 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-56747 2025-01-15 17:11 2024-11-6 Show GitHub Exploit DB Packet Storm
29 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2024-56765 2025-01-15 17:11 2024-12-18 Show GitHub Exploit DB Packet Storm
30 7.5 重要
Network 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 New CWE-264
CWE-noinfo
CVE-2024-56436 2025-01-15 17:10 2024-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
341 - - - In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute … New - CVE-2024-57487 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
342 - - - An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 512… New - CVE-2024-48883 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
343 - - - An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers. New - CVE-2024-46919 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
344 - - - The Contact Form Master WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used… Update - CVE-2024-12587 2025-01-14 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
345 - - - Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity.php. Update - CVE-2024-54687 2025-01-14 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
346 7.5 HIGH
Network 		huawei harmonyos Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability. Update NVD-CWE-noinfo
CVE-2024-56437 2025-01-14 04:27 2025-01-8 Show GitHub Exploit DB Packet Storm
347 5.9 MEDIUM
Network 		huawei harmonyos Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Update CWE-362
Race Condition 		CVE-2024-54120 2025-01-14 04:27 2025-01-8 Show GitHub Exploit DB Packet Storm
348 - - - An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does not… New - CVE-2024-46921 2025-01-14 04:15 2025-01-14 Show GitHub Exploit DB Packet Storm
349 - - - Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint New - CVE-2024-46310 2025-01-14 04:15 2025-01-14 Show GitHub Exploit DB Packet Storm
350 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Breadcrumbs2 extension allows Cross-Site Scripting (XSS).… Update - CVE-2025-23078 2025-01-14 04:15 2025-01-11 Show GitHub Exploit DB Packet Storm