Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
21 9.8 緊急
Network
EBM Technologies RISWEB EBM Technologies の RISWEB における SQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2024-26264 2025-01-24 15:29 2024-02-15 Show GitHub Exploit DB Packet Storm
22 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2024-57938 2025-01-24 15:08 2024-12-23 Show GitHub Exploit DB Packet Storm
23 4.9 警告
Network
openautomationsoftware oas platform openautomationsoftware の oas platform における脆弱性 New CWE-73
CWE-Other
CVE-2024-22178 2025-01-24 14:55 2024-04-3 Show GitHub Exploit DB Packet Storm
24 6.5 警告
Network
Fortra GoAnywhere Managed File Transfer Fortra の GoAnywhere Managed File Transfer におけるパストラバーサルの脆弱性 New CWE-22
CWE-22
CVE-2024-25156 2025-01-24 14:48 2024-03-14 Show GitHub Exploit DB Packet Storm
25 6.1 警告
Network
Etoile Web Design Ultimate Reviews Etoile Web Design の WordPress 用 Ultimate Reviews におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-25597 2025-01-24 14:48 2024-03-15 Show GitHub Exploit DB Packet Storm
26 5.3 警告
Network
Moodle
Fedora Project
Moodle
Fedora
Moodle の Moodle 等複数ベンダの製品におけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
CWE-639
CVE-2024-25983 2025-01-24 14:47 2024-02-19 Show GitHub Exploit DB Packet Storm
27 9.8 緊急
Network
PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア
複数の PHOENIX CONTACT 製品における重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説
CVE-2024-25995 2025-01-24 14:47 2024-03-12 Show GitHub Exploit DB Packet Storm
28 7.3 重要
Network
PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア
複数の PHOENIX CONTACT 製品におけるコマンドインジェクションの脆弱性 New CWE-20
CWE-77
CVE-2024-25998 2025-01-24 14:47 2024-03-12 Show GitHub Exploit DB Packet Storm
29 9.8 緊急
Network
PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア
複数の PHOENIX CONTACT 製品における境界外書き込みに関する脆弱性 New CWE-20
CWE-787
CVE-2024-26001 2025-01-24 14:47 2024-03-12 Show GitHub Exploit DB Packet Storm
30 5.3 警告
Network
Open Knowledge Foundation CKAN Open Knowledge Foundation の CKAN におけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
CWE-532
CVE-2024-27097 2025-01-24 14:47 2024-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 - - - Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, it's possible to determine whether an account exists based on an … CWE-200
Information Exposure
CVE-2025-24011 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
662 - - - HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. - CVE-2025-0377 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
663 - - - TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by… - CVE-2024-57036 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
664 - - - PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php. - CVE-2024-56990 2025-01-22 01:15 2025-01-22 Show GitHub Exploit DB Packet Storm
665 - - - In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… - CVE-2018-9464 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
666 - - - In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no… - CVE-2018-9461 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
667 - - - In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges need… - CVE-2018-9405 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
668 - - - In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privil… - CVE-2018-9401 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
669 - - - In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privile… - CVE-2018-9387 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm
670 6.3 MEDIUM
Network
- - A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/new_submit.php. The manipulation of t… - CVE-2025-0532 2025-01-22 01:15 2025-01-18 Show GitHub Exploit DB Packet Storm