Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 6:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
291 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microsoft Windows Server 2022 		Windows リモート デスクトップ サービスのリモートでコードが実行される脆弱性 New CWE-362
CWE-416
CWE-591
CVE-2024-49106 2025-01-15 14:52 2024-12-10 Show GitHub Exploit DB Packet Storm
292 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows PrintWorkflowUserSvc の特権昇格の脆弱性 New CWE-362
CWE-415
CWE-591
CVE-2024-49095 2025-01-15 14:48 2024-12-10 Show GitHub Exploit DB Packet Storm
293 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 New CWE-822
CWE-noinfo
CVE-2024-49090 2025-01-15 14:44 2024-12-10 Show GitHub Exploit DB Packet Storm
294 5.5 警告
Local 		オムロン株式会社 NB-Designer オムロン製 NB-Designer における XML 外部エンティティ参照（XXE）の不適切な制限の脆弱性 New CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-12298 2025-01-15 14:40 2025-01-14 Show GitHub Exploit DB Packet Storm
295 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows カーネルの特権の昇格の脆弱性 New CWE-362
競合状態 		CVE-2024-49084 2025-01-15 14:40 2024-12-10 Show GitHub Exploit DB Packet Storm
296 6.8 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		Windows エクスプローラーの情報漏えいの脆弱性 New CWE-22
CWE-noinfo
CVE-2024-49082 2025-01-15 14:36 2024-12-10 Show GitHub Exploit DB Packet Storm
297 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server&… 		入力方式エディター (IME) のリモートでコードが実行される脆弱性 New CWE-416
CWE-noinfo
CVE-2024-49079 2025-01-15 14:31 2024-12-10 Show GitHub Exploit DB Packet Storm
298 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		Windows リモート デスクトップ サービスのサービス拒否の脆弱性 New CWE-400
CWE-noinfo
CVE-2024-49075 2025-01-15 14:22 2024-12-10 Show GitHub Exploit DB Packet Storm
299 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microso… 		Windows 展開サービスの情報漏えいの脆弱性 New CWE-41
CWE-noinfo
CVE-2024-30036 2025-01-15 14:22 2024-05-14 Show GitHub Exploit DB Packet Storm
300 4.6 警告
Physics 		Huawei Mate 20 ファームウェア Huawei の Mate 20 ファームウェアにおける脆弱性 New CWE-200
CWE-noinfo
CVE-2020-9082 2025-01-15 14:18 2020-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 17, 2025, 5:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 - - - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even … New - CVE-2024-12087 2025-01-15 07:15 2025-01-15 Show GitHub Exploit DB Packet Storm
332 - - - A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. D… New - CVE-2024-12086 2025-01-15 07:15 2025-01-15 Show GitHub Exploit DB Packet Storm
333 - - - IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface. New - CVE-2025-23019 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
334 - - - IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an ex… New - CVE-2025-23018 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
335 7.8 HIGH
Local 		- - Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitat… New CWE-122
Heap-based Buffer Overflow 		CVE-2025-21139 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
336 7.8 HIGH
Local 		- - Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… New CWE-787
 Out-of-bounds Write 		CVE-2025-21138 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
337 7.8 HIGH
Local 		- - Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitat… New CWE-122
Heap-based Buffer Overflow 		CVE-2025-21137 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
338 7.8 HIGH
Local 		- - Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… New CWE-787
 Out-of-bounds Write 		CVE-2025-21136 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
339 7.8 HIGH
Local 		- - Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. E… New CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2025-21135 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm
340 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2024-5175 2025-01-15 05:15 2025-01-15 Show GitHub Exploit DB Packet Storm