Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
321 5.4 警告
Network 		Jegtheme Jeg Elementor Kit Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0334 2025-01-16 16:42 2024-05-1 Show GitHub Exploit DB Packet Storm
322 5.4 警告
Network 		Livemesh Livemesh Addons for Elementor Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1235 2025-01-16 16:42 2024-02-29 Show GitHub Exploit DB Packet Storm
323 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability New CWE-122
CWE-noinfo
CVE-2025-21333 2025-01-16 16:28 2025-01-14 Show GitHub Exploit DB Packet Storm
324 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft OLE DB Driver 		SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-28926 2025-01-16 16:19 2024-04-9 Show GitHub Exploit DB Packet Storm
325 6.8 警告
Physics 		Huawei Myna ファームウェア Huawei の Myna ファームウェアにおけるデータの整合性検証不備に関する脆弱性 New CWE-354
CWE-354
CVE-2020-9210 2025-01-16 16:11 2020-02-18 Show GitHub Exploit DB Packet Storm
326 7.8 重要
Local 		Huawei FusionCompute ファームウェア Huawei の FusionCompute ファームウェアにおける脆弱性 New CWE-269
CWE-noinfo
CVE-2020-9222 2025-01-16 16:11 2020-02-18 Show GitHub Exploit DB Packet Storm
327 6.5 警告
Network 		Huawei Lion-AL00C ファームウェア Huawei の Lion-AL00C ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2020-9253 2025-01-16 16:11 2020-02-18 Show GitHub Exploit DB Packet Storm
328 5.3 警告
Network 		Huawei HUAWEI 4G Router B612 ファームウェア Huawei の HUAWEI 4G Router B612 ファームウェアにおける NULL ポインタデリファレンスに関する脆弱性 New CWE-476
CWE-476
CVE-2020-9085 2025-01-16 16:10 2020-02-18 Show GitHub Exploit DB Packet Storm
329 5.3 警告
Network 		Huawei NIP6600 ファームウェア
Secospace USG6300 ファームウェア
NIP6800 ファームウェア
USG6000V ファームウェア
NIP6300 ファームウェア
Secospace USG6600 ファームウェア
NGFW Module ファ… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2020-1822 2025-01-16 16:10 2024-12-28 Show GitHub Exploit DB Packet Storm
330 5.3 警告
Network 		Huawei NIP6600 ファームウェア
Secospace USG6300 ファームウェア
NIP6800 ファームウェア
USG6000V ファームウェア
NIP6300 ファームウェア
Secospace USG6600 ファームウェア
NGFW Module ファ… 		複数の Huawei 製品における境界外読み取りに関する脆弱性 New CWE-125
CWE-125
CVE-2020-1824 2025-01-16 16:10 2024-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 - - - Cross-Site Request Forgery (CSRF) vulnerability in mastersoftwaresolutions WP VTiger Synchronization allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through 1.1.1. New CWE-352
 Origin Validation Error 		CVE-2025-23455 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
302 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: fro… New CWE-79
Cross-site Scripting 		CVE-2025-23453 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
303 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EditionGuard Dev Team EditionGuard for WooCommerce – eBook Sales with DRM allows Reflected XSS.Th… New CWE-79
Cross-site Scripting 		CVE-2025-23452 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
304 - - - Cross-Site Request Forgery (CSRF) vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1. New CWE-352
 Origin Validation Error 		CVE-2025-23445 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
305 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Scroll Top Advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a thro… New CWE-79
Cross-site Scripting 		CVE-2025-23444 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
306 - - - Cross-Site Request Forgery (CSRF) vulnerability in matias s Shockingly Big IE6 Warning allows Stored XSS.This issue affects Shockingly Big IE6 Warning: from n/a through 1.6.3. New CWE-352
 Origin Validation Error 		CVE-2025-23442 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
307 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MarvinLabs WP PT-Viewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through 2.… New CWE-79
Cross-site Scripting 		CVE-2025-23438 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
308 - - - Cross-Site Request Forgery (CSRF) vulnerability in Capa Wp-Scribd-List allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through 1.2. New CWE-352
 Origin Validation Error 		CVE-2025-23436 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
309 - - - Cross-Site Request Forgery (CSRF) vulnerability in David Marcucci Password Protect Plugin for WordPress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through 0.… New CWE-352
 Origin Validation Error 		CVE-2025-23435 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
310 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Albertolabs.com Easy EU Cookie law allows Stored XSS.This issue affects Easy EU Cookie law: from … New CWE-79
Cross-site Scripting 		CVE-2025-23434 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm