Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
331	6.7	警告 Local	マイクロソフト	Microsoft Office Microsoft 365 Apps Microsoft Outlook	Microsoft Outlook のリモートでコードが実行される脆弱性 New	CWE-908 CWE-noinfo	CVE-2025-21357	2025-01-22 17:26	2025-01-14	Show	GitHub Exploit DB Packet Storm

332	4.9	警告 Network	ZyXEL	DX5401-B1 ファームウェア DX3300-T0 ファームウェア ex5401-b0 ファームウェア EX5600-T1 ファームウェア DX4510-B1 ファームウェア EX5401-B1 ファームウェア EX3510-B1 ファームウェア EX3510-B0 ファ…	複数の ZyXEL 製品における古典的バッファオーバーフローの脆弱性 New	CWE-120 古典的バッファオーバーフロー	CVE-2024-9197	2025-01-22 17:20	2024-12-3	Show	GitHub Exploit DB Packet Storm

333	5.3	警告 Network	Fortra	FileCatalyst Direct	Fortra の FileCatalyst Direct におけるパストラバーサルの脆弱性 New	CWE-22 CWE-22	CVE-2024-25154	2025-01-22 17:17	2024-03-13	Show	GitHub Exploit DB Packet Storm

334	9.8	緊急 Network	The Biosig Project Fedora Project	libbiosig Fedora	The Biosig Project の libbiosig 等複数ベンダの製品における境界外書き込みに関する脆弱性 New	CWE-787 境界外書き込み	CVE-2024-23305	2025-01-22 17:15	2024-02-20	Show	GitHub Exploit DB Packet Storm

335	9.8	緊急 Network	dirk1983	chatgpt-wechat-personal	dirk1983 の chatgpt-wechat-personal におけるサーバサイドのリクエストフォージェリの脆弱性 New	CWE-918 CWE-918	CVE-2024-27565	2025-01-22 17:08	2024-03-5	Show	GitHub Exploit DB Packet Storm

336	5.4	警告 Network	Gonahkar	Custom fields shortcode	Gonahkar の WordPress 用 Custom fields shortcode におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2023-6809	2025-01-22 17:05	2023-12-13	Show	GitHub Exploit DB Packet Storm

337	5.4	警告 Network	Savvy Wordpress Development	MyWaze	Savvy Wordpress Development の WordPress 用 MyWaze におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-25594	2025-01-22 17:03	2024-02-29	Show	GitHub Exploit DB Packet Storm

338	7.8	重要 Local	マイクロソフト	Microsoft SharePoint Enterprise Server Microsoft SharePoint Server	Microsoft SharePoint Server のリモートでコードが実行される脆弱性 New	CWE-20 CWE-noinfo	CVE-2025-21344	2025-01-22 17:00	2025-01-14	Show	GitHub Exploit DB Packet Storm

339	8.8	重要 Network	ZyXEL	nwa90ax pro ファームウェア nwa1123acv3 ファームウェア nwa220ax-6e ファームウェア WAX610D ファームウェア wax300h ファームウェア WAX510D ファームウェア wac500h ファームウェア wac500 ファ…	複数の ZyXEL 製品における脆弱性 New	CWE-269 CWE-noinfo	CVE-2024-12398	2025-01-22 16:58	2024-12-10	Show	GitHub Exploit DB Packet Storm

340	6.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microsoft Windows 10 Microsoft Window…	Windows デジタルメディアの特権昇格の脆弱性 New	CWE-125 CWE-noinfo	CVE-2025-21341	2025-01-22 16:57	2025-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
641	-		-	-	In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. This could lead to local escalation of pri… Update	-	CVE-2018-9382	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

642	-		-	-	In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to local information disclosure with no additio… Update	-	CVE-2018-9379	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

643	-		-	-	In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege… Update	-	CVE-2018-9375	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

644	-		-	-	WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php. Update	-	CVE-2024-57035	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

645	-		-	-	WeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter. Update	-	CVE-2024-57034	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

646	-		-	-	WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing a… Update	-	CVE-2024-57032	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

647	-		-	-	WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id_funcionario parameter. Update	-	CVE-2024-57031	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

648	6.3	MEDIUM Network	-	-	A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/edit_mem_submit.php. The manipulation of the arg… Update	-	CVE-2025-0535	2025-01-22 02:15	2025-01-18	Show	GitHub Exploit DB Packet Storm

649	-		-	-	A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payl… Update	-	CVE-2024-57774	2025-01-22 02:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

650	-		-	-	A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Update	-	CVE-2024-57773	2025-01-22 02:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed