Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
21 3.3
Local
アップル iOS
iPadOS
アップルの iPadOS および iOS における脆弱性 New CWE-noinfo
情報不足
CVE-2025-24141 2025-01-31 15:31 2025-01-27 Show GitHub Exploit DB Packet Storm
22 6.5 警告
Network
アップル tvOS
watchOS
iPadOS
iOS
visionos
複数のアップル製品における脆弱性 New CWE-noinfo
情報不足
CVE-2024-54497 2025-01-31 15:30 2024-12-11 Show GitHub Exploit DB Packet Storm
23 3.3
Local
- アップルの macOS における脆弱性 New CWE-noinfo
情報不足
CVE-2025-24100 2025-01-31 15:27 2025-01-27 Show GitHub Exploit DB Packet Storm
24 7.5 重要
Network
- アップルの macOS における脆弱性 New CWE-noinfo
情報不足
CVE-2024-54557 2025-01-31 15:25 2024-12-11 Show GitHub Exploit DB Packet Storm
25 7.8 重要
Local
アップル watchOS
iOS
tvOS
iPadOS
複数のアップル製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2024-54522 2025-01-31 15:23 2024-12-11 Show GitHub Exploit DB Packet Storm
26 3.3
Local
- アップルの macOS における脆弱性 New CWE-noinfo
情報不足
CVE-2024-44172 2025-01-31 15:20 2024-09-16 Show GitHub Exploit DB Packet Storm
27 6.1 警告
Network
Westguard Solutions WS Form Westguard Solutions の WordPress 用 WS Form におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13509 2025-01-31 15:16 2025-01-28 Show GitHub Exploit DB Packet Storm
28 8.1 重要
Network
Elementor Elementor Website Builder Elementor の WordPress 用 Elementor Website Builder におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2024-24934 2025-01-31 15:16 2024-05-17 Show GitHub Exploit DB Packet Storm
29 6.1 警告
Network
Esri Portal for ArcGIS Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-25698 2025-01-31 15:16 2024-04-4 Show GitHub Exploit DB Packet Storm
30 8.8 重要
Network
unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-3055 2025-01-31 15:16 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
521 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial Context Setup Response` messag… - CVE-2023-37004 2025-01-29 06:15 2025-01-23 Show GitHub Exploit DB Packet Storm
522 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Setup Response` message missing … - CVE-2023-37003 2025-01-29 06:15 2025-01-23 Show GitHub Exploit DB Packet Storm
523 - - - Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Modification Indication` message… - CVE-2023-37002 2025-01-29 06:15 2025-01-23 Show GitHub Exploit DB Packet Storm
524 3.7 LOW
Network
- - A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Ha… CWE-310
CWE-319
Cryptographic Issues
Cleartext Transmission of Sensitive Information
CVE-2025-0784 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
525 - - - In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of pr… - CVE-2024-40676 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
526 - - - In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User… - CVE-2024-40675 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
527 - - - In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no add… - CVE-2024-40674 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
528 - - - In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead to remote code exec… - CVE-2024-40673 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
529 - - - In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additiona… - CVE-2018-9378 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
530 - - - In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution pr… - CVE-2018-9373 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm