Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
341 4.3 警告
Network
Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-1502 2025-01-16 15:49 2024-03-21 Show GitHub Exploit DB Packet Storm
342 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-2823 2025-01-16 15:49 2024-03-22 Show GitHub Exploit DB Packet Storm
343 4.3 警告
Network
DesDev Inc. DedeCMS DesDev Inc. の DedeCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-3144 2025-01-16 15:48 2024-04-2 Show GitHub Exploit DB Packet Storm
344 6.5 警告
Network
Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-3553 2025-01-16 15:48 2024-05-2 Show GitHub Exploit DB Packet Storm
345 9 緊急
Network
FreeScout FreeScout FreeScout における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-29185 2025-01-16 15:48 2024-03-22 Show GitHub Exploit DB Packet Storm
346 7.8 重要
Local
クアルコム Snapdragon 8cx Compute Platform ファームウェア
snapdragon 8cx gen 3 ファームウェア
QCA6391 ファームウェア
fastconnect 6900 ファームウェア
Snapdragon 8cx&nb…
複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-120
CWE-787
CVE-2023-43540 2025-01-16 15:46 2023-09-19 Show GitHub Exploit DB Packet Storm
347 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用
CVE-2021-47554 2025-01-16 15:46 2021-11-24 Show GitHub Exploit DB Packet Storm
348 7.8 重要
Local
クアルコム APQ8030 ファームウェア
APQ8064 ファームウェア
9206 lte modem ファームウェア
c-v2x 9150 ファームウェア
9207 lte modem ファームウェア
CSRA6640 ファームウェア
APQ8037 …
複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-787
CWE-823
CVE-2023-33066 2025-01-16 15:43 2023-05-17 Show GitHub Exploit DB Packet Storm
349 7.8 重要
Local
マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2025
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用
CVE-2025-21335 2025-01-16 15:43 2025-01-14 Show GitHub Exploit DB Packet Storm
350 7.3 重要
Local
マイクロソフト Azure Data Studio Azure Data Studio の特権の昇格の脆弱性 CWE-284
CWE-noinfo
CVE-2024-26203 2025-01-16 15:38 2024-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
421 - - - Cross-Site Request Forgery (CSRF) vulnerability in Andy Chapman ECT Add to Cart Button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through 1.4. New CWE-352
 Origin Validation Error
CVE-2025-23471 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
422 - - - Cross-Site Request Forgery (CSRF) vulnerability in X Villamuera Visit Site Link enhanced allows Stored XSS.This issue affects Visit Site Link enhanced: from n/a through 1.0. New CWE-352
 Origin Validation Error
CVE-2025-23470 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
423 - - - Cross-Site Request Forgery (CSRF) vulnerability in Vimal Ghorecha RSS News Scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through 2.0.0. New CWE-352
 Origin Validation Error
CVE-2025-23467 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
424 - - - Cross-Site Request Forgery (CSRF) vulnerability in Mukesh Dak MD Custom content after or before of post allows Stored XSS.This issue affects MD Custom content after or before of post: from n/a throug… New CWE-352
 Origin Validation Error
CVE-2025-23463 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
425 - - - Cross-Site Request Forgery (CSRF) vulnerability in Somethinkodd.com Development Team EmailShroud allows Reflected XSS.This issue affects EmailShroud: from n/a through 2.2.1. New CWE-352
 Origin Validation Error
CVE-2025-23456 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
426 - - - Cross-Site Request Forgery (CSRF) vulnerability in mastersoftwaresolutions WP VTiger Synchronization allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through 1.1.1. New CWE-352
 Origin Validation Error
CVE-2025-23455 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
427 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: fro… New CWE-79
Cross-site Scripting
CVE-2025-23453 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
428 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EditionGuard Dev Team EditionGuard for WooCommerce – eBook Sales with DRM allows Reflected XSS.Th… New CWE-79
Cross-site Scripting
CVE-2025-23452 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
429 - - - Cross-Site Request Forgery (CSRF) vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1. New CWE-352
 Origin Validation Error
CVE-2025-23445 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
430 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Scroll Top Advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a thro… New CWE-79
Cross-site Scripting
CVE-2025-23444 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm