Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 14, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
381 8.8 重要
Adjacent 		ネットギア RAX38 ファームウェア
RAXE300 ファームウェア
RAX35 ファームウェア
RAX30 ファームウェア 		複数のネットギア製品における SQL インジェクションの脆弱性 CWE-89
CWE-89
CVE-2023-27358 2025-01-10 11:19 2023-02-28 Show GitHub Exploit DB Packet Storm
382 5.4 警告
Network 		Jegtheme Jeg Elementor Kit Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10308 2025-01-10 11:19 2024-11-26 Show GitHub Exploit DB Packet Storm
383 6.4 警告
Network 		Helm Helm Helm におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2024-25620 2025-01-10 11:19 2024-02-15 Show GitHub Exploit DB Packet Storm
384 7.5 重要
Network 		デル EMC PowerScale OneFS デルの EMC PowerScale OneFS におけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2024-25954 2025-01-10 11:19 2024-03-28 Show GitHub Exploit DB Packet Storm
385 4.4 警告
Local 		デル EMC PowerScale OneFS デルの EMC PowerScale OneFS における脆弱性 CWE-73
CWE-Other
CVE-2024-25965 2025-01-10 11:19 2024-05-14 Show GitHub Exploit DB Packet Storm
386 6.7 警告
Local 		デル EMC PowerScale OneFS デルの EMC PowerScale OneFS における脆弱性 CWE-250
CWE-Other
CVE-2024-25967 2025-01-10 11:19 2024-05-14 Show GitHub Exploit DB Packet Storm
387 7.5 重要
Network 		Helm Helm Helm における初期化されていないリソースの使用に関する脆弱性 CWE-457
CWE-908
CVE-2024-26147 2025-01-10 11:19 2024-02-21 Show GitHub Exploit DB Packet Storm
388 7.2 重要
Network 		cilium cilium cilium における脆弱性 CWE-693
CWE-noinfo
CVE-2024-28248 2025-01-10 11:19 2024-03-18 Show GitHub Exploit DB Packet Storm
389 9.9 緊急
Network 		FIT2CLOUD jumpserver FIT2CLOUD の jumpserver におけるコードインジェクションの脆弱性 CWE-94
CWE-94
CVE-2024-29202 2025-01-10 11:19 2024-03-29 Show GitHub Exploit DB Packet Storm
390 7.1 重要
Network 		Contao contao Contao におけるセッション期限に関する脆弱性 CWE-384
CWE-613
CWE-613
CVE-2024-30262 2025-01-10 11:19 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 - - - An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials. New CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2024-47571 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
92 - - - A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to d… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-46667 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
93 - - - An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticate… New CWE-125
Out-of-bounds Read 		CVE-2024-36504 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
94 - - - A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via… New CWE-23
CWE-22
 Relative Path Traversal
Path Traversal 		CVE-2024-32115 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
95 - - - An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack a… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-23106 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
96 - - - A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a privileged user to execute arbitrary code via specially crafted CLI commands, prov… New CWE-121
CWE-120
Stack-based Buffer Overflow
Classic Buffer Overflow 		CVE-2024-21758 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
97 - - - An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenti… New CWE-89
SQL Injection 		CVE-2023-37931 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
98 - - - Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php. New - CVE-2023-42250 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
99 - - - Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php. New - CVE-2023-42249 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm
100 - - - Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php. New - CVE-2023-42247 2025-01-15 00:15 2025-01-14 Show GitHub Exploit DB Packet Storm