Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
371 6.5 警告
Adjacent 		Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37031 2025-01-28 15:01 2023-06-28 Show GitHub Exploit DB Packet Storm
372 6.5 警告
Adjacent 		Linux Foundation Magma Linux Foundation の Magma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
CWE-476
CVE-2023-37036 2025-01-28 15:01 2023-06-28 Show GitHub Exploit DB Packet Storm
373 7.8 重要
Local 		クアルコム qam8775p ファームウェア
AR8035 ファームウェア
QAM8295P ファームウェア
fastconnect 6900 ファームウェア
QCA6391 ファームウェア
fastconnect 6200 ファームウェア
QCA6430 ファームウェア
QC… 		複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2023-43538 2025-01-28 15:01 2023-09-19 Show GitHub Exploit DB Packet Storm
374 7.8 重要
Local 		クアルコム QCA8337 ファームウェア
qcc2073 ファームウェア
AR8035 ファームウェア
QCA6696 ファームウェア
qca6554a ファームウェア
QCA6574 ファームウェア
QCA6574AU ファームウェア
qcc710 ファームウェア
qfw711… 		複数のクアルコム製品における整数オーバーフローの脆弱性 CWE-190
CWE-190
CVE-2023-43545 2025-01-28 15:01 2023-09-19 Show GitHub Exploit DB Packet Storm
375 5.4 警告
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0445 2025-01-28 15:01 2024-05-14 Show GitHub Exploit DB Packet Storm
376 5.4 警告
Network 		Elementor Elementor Website Builder Elementor の WordPress 用 Elementor Website Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0506 2025-01-28 15:01 2024-02-29 Show GitHub Exploit DB Packet Storm
377 5.4 警告
Network 		getshortcodes shortcodes ultimate getshortcodes の WordPress 用 shortcodes ultimate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1808 2025-01-28 15:01 2024-02-28 Show GitHub Exploit DB Packet Storm
378 6.5 警告
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の AC18 ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-2559 2025-01-28 15:01 2024-03-17 Show GitHub Exploit DB Packet Storm
379 5.4 警告
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2785 2025-01-28 15:01 2024-05-14 Show GitHub Exploit DB Packet Storm
380 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2025
Microsoft Window… 		Windows SmartScreen スプーフィングの脆弱性 CWE-451
CWE-noinfo
CVE-2025-21314 2025-01-28 14:49 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 7.5 HIGH
Network 		- - Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network. CWE-862
 Missing Authorization 		CVE-2025-21396 2025-01-30 08:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1072 5.4 MEDIUM
Network 		- - User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network - CVE-2025-21262 2025-01-30 08:15 2025-01-25 Show GitHub Exploit DB Packet Storm
1073 - - - A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations. - CVE-2025-0851 2025-01-30 07:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1074 7.3 HIGH
Network 		- - A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0842 2025-01-30 07:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1075 - - - When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper sanitization of user input, an unauthent… - CVE-2024-54852 2025-01-30 07:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1076 7.5 HIGH
Network 		- - Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.3… - CVE-2024-12705 2025-01-30 07:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1077 7.5 HIGH
Network 		- - It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either t… - CVE-2024-11187 2025-01-30 07:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1078 - - - An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level. - CVE-2025-0781 2025-01-30 07:15 2025-01-29 Show GitHub Exploit DB Packet Storm
1079 - - - kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernete… CWE-200
CWE-532
CWE-212
Information Exposure
 Inclusion of Sensitive Information in Log Files
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2025-24884 2025-01-30 06:15 2025-01-30 Show GitHub Exploit DB Packet Storm
1080 - - - The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vu… CWE-276
Incorrect Default Permissions  		CVE-2025-24795 2025-01-30 06:15 2025-01-30 Show GitHub Exploit DB Packet Storm