Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 24, 2025, 4:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
321	6.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microsoft Windows 10 Microsoft Window…	Windows デジタルメディアの特権昇格の脆弱性 New	CWE-125 CWE-noinfo	CVE-2025-21341	2025-01-22 16:57	2025-01-14	Show	GitHub Exploit DB Packet Storm

322	5.3	警告 Adjacent	ZyXEL	ATP500 ファームウェア ATP800 ファームウェア ATP100 ファームウェア atp700 ファームウェア atp100w ファームウェア ATP200 ファームウェア USG FLEX 100H ファームウェア usg flex 1…	複数の ZyXEL 製品における NULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2023-6397	2025-01-22 16:54	2023-11-30	Show	GitHub Exploit DB Packet Storm

323	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows 11 Microsoft Windows Server 2025 Microsoft Windows Server&…	Windows 仮想化ベースセキュリティ (VBS) のセキュリティ機能バイパスの脆弱性 New	CWE-284 CWE-noinfo	CVE-2025-21340	2025-01-22 16:54	2025-01-14	Show	GitHub Exploit DB Packet Storm

324	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2024-57801	2025-01-22 16:52	2024-12-23	Show	GitHub Exploit DB Packet Storm

325	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2024-57882	2025-01-22 16:52	2024-12-30	Show	GitHub Exploit DB Packet Storm

326	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における整数オーバーフローの脆弱性 New	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2024-57890	2025-01-22 16:52	2024-12-4	Show	GitHub Exploit DB Packet Storm

327	5.6	警告 Local	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microsoft Windows 10 Microsoft Window…	Windows 暗号化の情報漏えいの脆弱性 New	CWE-noinfo 情報不足	CVE-2025-21336	2025-01-22 16:52	2025-01-14	Show	GitHub Exploit DB Packet Storm

328	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2024-57900	2025-01-22 16:49	2024-12-30	Show	GitHub Exploit DB Packet Storm

329	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性 New	CWE-noinfo 情報不足	CVE-2024-57895	2025-01-22 16:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

330	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2024-36476	2025-01-22 16:45	2024-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
751	7.5	HIGH Network	-	-	The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the search parame…	CWE-89 SQL Injection	CVE-2025-0308	2025-01-18 15:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

752	6.1	MEDIUM Network	-	-	The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.5 due to insufficient input saniti…	CWE-79 Cross-site Scripting	CVE-2024-13516	2025-01-18 15:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

753	6.1	MEDIUM Network	-	-	The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'path' parameter in all versions up to, and including, 2.2…	CWE-79 Cross-site Scripting	CVE-2024-13515	2025-01-18 15:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

754	5.3	MEDIUM Network	-	-	The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete…	CWE-862 Missing Authorization	CVE-2024-12071	2025-01-18 13:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

755	-		-	-	Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where yo…	CWE-94 Code Injection	CVE-2025-23209	2025-01-18 10:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

756	-		-	-	Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3	-	CVE-2024-11923	2025-01-18 09:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

757	-		-	-	A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.	-	CVE-2023-50739	2025-01-18 09:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

758	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2020-0436	2025-01-18 09:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

759	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2020-0040	2025-01-18 09:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

760	-		-	-	In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede…	-	CVE-2018-9406	2025-01-18 09:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed