Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
351 8.8 重要
Local
クアルコム QCA6574AU ファームウェア
fastconnect 6700 ファームウェア
qcn9012 ファームウェア
QCA8337 ファームウェア
flight rb5 5g ファームウェア
AR8035 ファームウェア
qcm5430 ファームウェア
複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2023-43556 2025-01-28 16:14 2023-09-19 Show GitHub Exploit DB Packet Storm
352 6.5 警告
Adjacent
Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37034 2025-01-28 16:13 2023-06-28 Show GitHub Exploit DB Packet Storm
353 7.5 重要
Network
クアルコム mdm9205s ファームウェア
APQ8017 ファームウェア
fastconnect 6700 ファームウェア
CSRA6640 ファームウェア
9207 lte modem ファームウェア
APQ8037 ファームウェア
AR8035 ファームウェア
複数のクアルコム製品における認証に関する脆弱性 CWE-287
CWE-287
CVE-2023-43551 2025-01-28 16:13 2023-09-19 Show GitHub Exploit DB Packet Storm
354 7.5 重要
Network
ZyXEL NR7102 ファームウェア
LTE3301-PLUS ファームウェア
EE6510-10 ファームウェア
DX3301-T0 ファームウェア
DX3300-T0 ファームウェア
DX4510-B1 ファームウェア
Nebula NR5101 ファームウェア
LTE5388-…
複数の ZyXEL 製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2024-8748 2025-01-28 16:12 2024-12-3 Show GitHub Exploit DB Packet Storm
355 6.6 警告
Physics
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window…
Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21255 2025-01-28 16:12 2025-01-14 Show GitHub Exploit DB Packet Storm
356 6.6 警告
Physics
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window…
Windows デジタル メディアの特権昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2025-21229 2025-01-28 16:06 2025-01-14 Show GitHub Exploit DB Packet Storm
357 6.5 警告
Network
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 10
Microsoft Windows Server 2012
Microsoft Windows Server 2022
Microsoft Window…
Windows NTLM のなりすましの脆弱性 CWE-693
CWE-noinfo
CVE-2025-21217 2025-01-28 16:04 2025-01-14 Show GitHub Exploit DB Packet Storm
358 7.8 重要
Local
Sagemcom F@st 3686 ファームウェア Sagemcom の F@st 3686 ファームウェアにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2024-1623 2025-01-28 15:58 2024-03-14 Show GitHub Exploit DB Packet Storm
359 4.3 警告
Network
billminozzi Disable Json API
 Login Lockdown
 XMLRPC
 Pingback
 Stop User Enumeration Anti Hacker Scan
Bill Minozzi の WordPress 用 Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2024-1861 2025-01-28 15:41 2024-02-28 Show GitHub Exploit DB Packet Storm
360 4.6 警告
Physics
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Window…
セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-125
CWE-noinfo
CVE-2025-21215 2025-01-28 15:37 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 5.9 MEDIUM
Network
- - The Order Export for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.24 via the 'uploads' directory. This makes it possible fo… CWE-200
Information Exposure
CVE-2024-13623 2025-01-31 16:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1232 - - - A UAA configured with multiple identity zones, does not properly validate session information across those zones. A User authenticated against a corporate IDP can re-use their jsessionid to access o… - CVE-2025-22216 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1233 7.2 HIGH
Network
- - The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to, and including, 3.4 due to insufficient input sanitization and output escaping.… CWE-79
Cross-site Scripting
CVE-2025-0809 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1234 4.3 MEDIUM
Network
- - The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae and vcita_ajax_togg… CWE-862
 Missing Authorization
CVE-2024-13717 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1235 7.2 HIGH
Network
- - The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42… CWE-79
Cross-site Scripting
CVE-2024-13504 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1236 4.3 MEDIUM
Network
- - The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwoosc_ajax' AJAX endpoint in all versions up to, and incl… CWE-862
 Missing Authorization
CVE-2024-13424 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1237 4.3 MEDIUM
Network
- - The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all version… CWE-862
 Missing Authorization
CVE-2024-13415 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1238 4.3 MEDIUM
Network
- - The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2024-13216 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1239 - - - The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could al… - CVE-2024-13101 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1240 - - - The OPSI Israel Domestic Shipments WordPress plugin through 2.6.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which cou… - CVE-2024-13100 2025-01-31 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm