Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 18, 2025, 10:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 5.9 警告
Network 		Huawei HarmonyOS Huawei の HarmonyOS における競合状態に関する脆弱性 New CWE-362
CWE-362
CVE-2024-54120 2025-01-16 16:07 2024-11-29 Show GitHub Exploit DB Packet Storm
332 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. W15E ファームウェア Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-4126 2025-01-16 16:05 2024-04-24 Show GitHub Exploit DB Packet Storm
333 4.3 警告
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2024-4591 2025-01-16 16:05 2024-05-7 Show GitHub Exploit DB Packet Storm
334 6.1 警告
Network 		Metagauss Inc. eventprime Metagauss Inc. の WordPress 用 eventprime におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-9865 2025-01-16 16:05 2024-10-24 Show GitHub Exploit DB Packet Storm
335 6.1 警告
Network 		oretnom23 customer support system Oretnom23 の customer support system におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CVE-2023-49973 2025-01-16 16:05 2023-12-4 Show GitHub Exploit DB Packet Storm
336 5.4 警告
Network 		Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1680 2025-01-16 16:05 2024-03-13 Show GitHub Exploit DB Packet Storm
337 8.8 重要
Network 		code-projects blood bank management system codezips の Blood Bank Management System における SQL インジェクションの脆弱性 New CWE-74
CWE-89
CWE-89
CVE-2025-0232 2025-01-16 16:03 2025-01-5 Show GitHub Exploit DB Packet Storm
338 4.8 警告
Network 		code-projects Local Storage Todo App code-projects の Local Storage Todo App におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CWE-94
CVE-2025-0228 2025-01-16 16:02 2025-01-5 Show GitHub Exploit DB Packet Storm
339 6.1 警告
Network 		FreeScout FreeScout FreeScout におけるクロスサイトスクリプティングの脆弱性 New CWE-74
CWE-79
CVE-2024-34697 2025-01-16 15:49 2024-05-14 Show GitHub Exploit DB Packet Storm
340 6.3 警告
Network 		FreeScout FreeScout FreeScout におけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 New CWE-1321
CWE-1321
CVE-2024-34698 2025-01-16 15:49 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 - - - A cross-site scripting (XSS) vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. New - CVE-2024-41453 2025-01-17 03:15 2025-01-16 Show GitHub Exploit DB Packet Storm
352 - - - A stored cross-site scripting (XSS) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. New - CVE-2024-53563 2025-01-17 03:15 2025-01-15 Show GitHub Exploit DB Packet Storm
353 - - - In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH. The root password is hardcoded in the firmware. NOTE: This vulnerability appe… Update - CVE-2024-57811 2025-01-17 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
354 - - - Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint Update - CVE-2024-46310 2025-01-17 03:15 2025-01-14 Show GitHub Exploit DB Packet Storm
355 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. Update - CVE-2024-57228 2025-01-17 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
356 - - - Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. Update - CVE-2024-57227 2025-01-17 03:15 2025-01-11 Show GitHub Exploit DB Packet Storm
357 - - - Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg… New - CVE-2025-0518 2025-01-17 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
358 - - - Rejected reason: This CVE ID is a reservation duplicate of CVE-2023-4677. Notes: All CVE users should reference CVE-2023-4677 instead of this CVE ID. New - CVE-2023-4319 2025-01-17 02:15 2025-01-17 Show GitHub Exploit DB Packet Storm
359 - - - A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1. An attacker with physical access may be able to access contacts from t… New - CVE-2024-54470 2025-01-17 02:15 2025-01-16 Show GitHub Exploit DB Packet Storm
360 - - - A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An… New - CVE-2024-40854 2025-01-17 02:15 2025-01-16 Show GitHub Exploit DB Packet Storm