Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 6.4 警告
Network 		マイクロソフト Microsoft On-Premises Data Gateway オンプレミス データ ゲートウェイの情報漏えいの脆弱性 CWE-863
CWE-noinfo
CVE-2025-21403 2025-01-28 17:10 2025-01-14 Show GitHub Exploit DB Packet Storm
332 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. w9 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の w9 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4241 2025-01-28 17:01 2024-04-26 Show GitHub Exploit DB Packet Storm
333 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. w9 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の w9 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4244 2025-01-28 17:01 2024-04-26 Show GitHub Exploit DB Packet Storm
334 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. i21 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の i21 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4491 2025-01-28 17:01 2024-05-5 Show GitHub Exploit DB Packet Storm
335 8.8 重要
Network 		Restaurant Reservations project Restaurant Reservations nicdarkthemes の WordPress 用 Restaurant Reservations における脆弱性 CWE-noinfo
情報不足 		CVE-2024-1382 2025-01-28 16:59 2024-03-7 Show GitHub Exploit DB Packet Storm
336 7.5 重要
Network 		eProsima Fast-DDS eProsima の Fast-DDS における境界外書き込みに関する脆弱性 CWE-120
CWE-122
CWE-787
CVE-2024-30259 2025-01-28 16:56 2024-05-14 Show GitHub Exploit DB Packet Storm
337 5.4 警告
Network 		JetBrains TeamCity JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-36374 2025-01-28 16:56 2024-05-29 Show GitHub Exploit DB Packet Storm
338 7.8 重要
Local 		マイクロソフト Microsoft Office
Microsoft OneNote 		Microsoft Office OneNote のリモートでコードが実行される脆弱性 CWE-641
CWE-noinfo
CVE-2025-21402 2025-01-28 16:55 2025-01-14 Show GitHub Exploit DB Packet Storm
339 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2558 2025-01-28 16:55 2024-03-17 Show GitHub Exploit DB Packet Storm
340 9.8 緊急
Network 		QuantumCloud WPBot QuantumCloud の WordPress 用 WPBot における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2024-13091 2025-01-28 16:44 2024-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 - - - Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of th… CWE-798
 Use of Hard-coded Credentials 		CVE-2025-1143 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1362 - - - A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/Category.php. The manipulation… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1170 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1363 3.5 LOW
Network 		- - A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The m… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1169 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1364 - - - A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php.… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1168 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1365 - - - A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected by this issue is some unknown functionality of the file /hr_soft/admin/Update_… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1167 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1366 - - - A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The mani… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-1166 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1367 - - - SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any… CWE-22
Path Traversal 		CVE-2025-25243 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1368 - - - Due to a missing authorization check, an attacker who is logged in to application can view/ delete ?My Overtime Requests? which could allow the attacker to access employee information. This leads to … CWE-862
 Missing Authorization 		CVE-2025-25241 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1369 - - - The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting ma… CWE-601
Open Redirect 		CVE-2025-24876 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm
1370 - - - SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this … CWE-352
 Origin Validation Error 		CVE-2025-24875 2025-02-11 15:15 2025-02-11 Show GitHub Exploit DB Packet Storm