Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
31 3.3
Local
アップル iOS
iPadOS
アップルの iPadOS および iOS における脆弱性 CWE-noinfo
情報不足
CVE-2025-24141 2025-01-31 15:31 2025-01-27 Show GitHub Exploit DB Packet Storm
32 6.5 警告
Network
アップル tvOS
watchOS
iPadOS
iOS
visionos
複数のアップル製品における脆弱性 CWE-noinfo
情報不足
CVE-2024-54497 2025-01-31 15:30 2024-12-11 Show GitHub Exploit DB Packet Storm
33 3.3
Local
- アップルの macOS における脆弱性 CWE-noinfo
情報不足
CVE-2025-24100 2025-01-31 15:27 2025-01-27 Show GitHub Exploit DB Packet Storm
34 7.5 重要
Network
- アップルの macOS における脆弱性 CWE-noinfo
情報不足
CVE-2024-54557 2025-01-31 15:25 2024-12-11 Show GitHub Exploit DB Packet Storm
35 7.8 重要
Local
アップル watchOS
iOS
tvOS
iPadOS
複数のアップル製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2024-54522 2025-01-31 15:23 2024-12-11 Show GitHub Exploit DB Packet Storm
36 3.3
Local
- アップルの macOS における脆弱性 CWE-noinfo
情報不足
CVE-2024-44172 2025-01-31 15:20 2024-09-16 Show GitHub Exploit DB Packet Storm
37 6.1 警告
Network
Westguard Solutions WS Form Westguard Solutions の WordPress 用 WS Form におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13509 2025-01-31 15:16 2025-01-28 Show GitHub Exploit DB Packet Storm
38 8.1 重要
Network
Elementor Elementor Website Builder Elementor の WordPress 用 Elementor Website Builder におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2024-24934 2025-01-31 15:16 2024-05-17 Show GitHub Exploit DB Packet Storm
39 6.1 警告
Network
Esri Portal for ArcGIS Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-25698 2025-01-31 15:16 2024-04-4 Show GitHub Exploit DB Packet Storm
40 8.8 重要
Network
unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-3055 2025-01-31 15:16 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 - - - An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of M… CWE-407
 Inefficient Algorithmic Complexity
CVE-2024-9631 2025-02-5 20:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1072 - - - An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLa… CWE-1023
CVE-2024-5528 2025-02-5 20:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1073 7.1 HIGH
Network
- - IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo… CWE-611
XXE
CVE-2024-49352 2025-02-5 20:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1074 - - - An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, which allowed cross project… CWE-286
Incorrect User Management 
CVE-2024-6356 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1075 - - - An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to… CWE-862
 Missing Authorization
CVE-2024-1539 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1076 - - - A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike th… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2023-6386 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1077 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if… - CVE-2023-52924 2025-02-5 19:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1078 5.3 MEDIUM
Network
- - The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 vi… CWE-200
Information Exposure
CVE-2024-13829 2025-02-5 15:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1079 - - - This vulnerability allows appliance compromise at boot time. - CVE-2025-24507 2025-02-5 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1080 - - - A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types. - CVE-2025-24506 2025-02-5 15:15 2025-01-31 Show GitHub Exploit DB Packet Storm