Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
321 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019 		Active Directory フェデレーション サーバーのなりすましの脆弱性 CWE-352
CWE-noinfo
CVE-2025-21193 2025-01-28 17:52 2025-01-14 Show GitHub Exploit DB Packet Storm
322 5.4 警告
Network 		Benjamin Intal, Gambit Stackable Benjamin Intal, Gambit の WordPress 用 Stackable におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-12117 2025-01-28 17:26 2024-12-3 Show GitHub Exploit DB Packet Storm
323 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-26770 2025-01-28 17:26 2024-01-23 Show GitHub Exploit DB Packet Storm
324 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Windows Server 2025
Microso… 		Windows Kerberos のサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2025-21218 2025-01-28 17:11 2025-01-14 Show GitHub Exploit DB Packet Storm
325 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window… 		Microsoft Message Queuing の情報漏えいの脆弱性 CWE-908
CWE-noinfo
CVE-2025-21220 2025-01-28 17:11 2025-01-14 Show GitHub Exploit DB Packet Storm
326 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows 10 		Windows Line Printer Daemon (LPD) サービスのリモートでコードが実行される脆弱性 CWE-416
CWE-591
CWE-noinfo
CVE-2025-21224 2025-01-28 17:11 2025-01-14 Show GitHub Exploit DB Packet Storm
327 6.6 警告
Physics 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window… 		Windows デジタル メディアの特権昇格の脆弱性 CWE-122
CWE-125
CWE-noinfo
CVE-2025-21256 2025-01-28 17:11 2025-01-14 Show GitHub Exploit DB Packet Storm
328 6.5 警告
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window… 		Windows COM サーバーの情報漏えいの脆弱性 CWE-908
CWE-noinfo
CVE-2025-21272 2025-01-28 17:10 2025-01-14 Show GitHub Exploit DB Packet Storm
329 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window… 		Microsoft Message Queuing (MSMQ) のサービス拒否の脆弱性 CWE-126
CWE-noinfo
CVE-2025-21277 2025-01-28 17:10 2025-01-14 Show GitHub Exploit DB Packet Storm
330 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window… 		Microsoft COM for Windows の特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2025-21281 2025-01-28 17:10 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1341 - - - A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerabil… - CVE-2025-23059 2025-02-5 03:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1342 - - - A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to… - CVE-2025-23058 2025-02-5 03:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1343 - - - BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an adminis… - CVE-2025-0364 2025-02-5 03:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1344 - - - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This inform… - CVE-2024-45659 2025-02-5 03:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1345 - - - Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based env… - CVE-2024-47770 2025-02-5 03:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1346 5.4 MEDIUM
Network 		sellerthemes storely The Storely theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 16.6 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting 		CVE-2024-10847 2025-02-5 03:13 2025-01-30 Show GitHub Exploit DB Packet Storm
1347 5.4 MEDIUM
Network 		posimyth the_plus_addons_for_elementor The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table Widget's searchab… CWE-79
Cross-site Scripting 		CVE-2024-11829 2025-02-5 02:49 2025-02-1 Show GitHub Exploit DB Packet Storm
1348 9.8 CRITICAL
Network 		needyamin library_card_system A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard.php of the component Admin Panel. The ma… CWE-89
SQL Injection 		CVE-2025-0843 2025-02-5 02:16 2025-01-30 Show GitHub Exploit DB Packet Storm
1349 6.1 MEDIUM
Network 		needyadmin library_card_system A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file signup.php of the component… CWE-79
Cross-site Scripting 		CVE-2025-0844 2025-02-5 01:57 2025-01-30 Show GitHub Exploit DB Packet Storm
1350 9.8 CRITICAL
Network 		1000projects employee_task_management_system A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of… CWE-89
SQL Injection 		CVE-2025-0846 2025-02-5 01:49 2025-01-30 Show GitHub Exploit DB Packet Storm