Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 7 重要
Local 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		Windows USB プリント ドライバーの特権の昇格の脆弱性 New CWE-126
CWE-362
CVE-2024-26243 2025-01-10 17:37 2024-04-9 Show GitHub Exploit DB Packet Storm
32 6.5 警告
Network 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		Windows Kerberos のサービス拒否の脆弱性 New CWE-476
CWE-noinfo
CVE-2024-26183 2025-01-10 17:36 2024-04-9 Show GitHub Exploit DB Packet Storm
33 8 重要
Adjacent 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-121
CWE-noinfo
CVE-2024-26180 2025-01-10 17:34 2024-04-9 Show GitHub Exploit DB Packet Storm
34 8 重要
Adjacent 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-20
CWE-noinfo
CVE-2024-26240 2025-01-10 17:32 2024-04-9 Show GitHub Exploit DB Packet Storm
35 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11 		Windows DWM Core ライブラリの情報漏えいの脆弱性 New CWE-125
CWE-noinfo
CVE-2024-26172 2025-01-10 17:32 2024-04-9 Show GitHub Exploit DB Packet Storm
36 7.3 重要
Local 		マイクロソフト PowerShell
Microsoft .NET Framework
.NET
Microsoft Visual Studio 		.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability New CWE-416
CWE-noinfo
CVE-2024-21409 2025-01-10 17:30 2024-04-9 Show GitHub Exploit DB Packet Storm
37 7 重要
Local 		マイクロソフト Microsoft Windows Server 2022 Windows Update スタックの特権の昇格の脆弱性 New CWE-362
CWE-591
CVE-2024-26236 2025-01-10 17:28 2024-04-9 Show GitHub Exploit DB Packet Storm
38 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows Server&… 		Windows カーネルの特権の昇格の脆弱性 New CWE-426
CWE-noinfo
CVE-2024-20693 2025-01-10 17:26 2024-04-9 Show GitHub Exploit DB Packet Storm
39 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server&… 		Windows 暗号化サービスのセキュリティ機能のバイパスの脆弱性 New CWE-310
CWE-347
CVE-2024-26228 2025-01-10 17:25 2024-04-9 Show GitHub Exploit DB Packet Storm
40 6.6 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows Server 2022 		Windows DNS サーバーのリモートでコードが実行される脆弱性 New CWE-203
CWE-416
CVE-2024-26221 2025-01-10 17:19 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 - - - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1. New - CVE-2024-13254 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
232 - - - Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0. New - CVE-2024-13253 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
233 - - - Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1. New - CVE-2024-13251 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
234 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6. New - CVE-2024-13250 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
235 - - - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.0 before 6.0.3. New - CVE-2024-13244 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
236 - - - Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1. New - CVE-2024-13243 2025-01-11 02:15 2025-01-10 Show GitHub Exploit DB Packet Storm
237 7.8 HIGH
Local 		qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qam8295p_firmware
qca6574au_firmware
qca6696_firmware
qcm8550_firmware
qcs6490_firmware
qcs8550_firmware
video_collaboratio… 		Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, Update CWE-787
 Out-of-bounds Write 		CVE-2024-33041 2025-01-11 02:15 2025-01-6 Show GitHub Exploit DB Packet Storm
238 7.8 HIGH
Local 		qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qam8295p_firmware
qca6574au_firmware
qca6696_firmware
qcm8550_firmware
qcs6490_firmware
qcs8550_firmware
video_collaboratio… 		Memory corruption while invoking IOCTL calls to unmap the DMA buffers. Update CWE-416
 Use After Free 		CVE-2024-33055 2025-01-11 02:01 2025-01-6 Show GitHub Exploit DB Packet Storm
239 7.8 HIGH
Local 		qualcomm fastconnect_6900_firmware
fastconnect_7800_firmware
qcm8550_firmware
qcs8550_firmware
sg8275p_firmware
sm8550p_firmware
snapdragon_8_gen_2_mobile_firmware
snapdragon_8_gen_3_mobi… 		Memory corruption while processing frame command IOCTL calls. Update CWE-416
 Use After Free 		CVE-2024-33059 2025-01-11 01:53 2025-01-6 Show GitHub Exploit DB Packet Storm
240 5.5 MEDIUM
Local 		qualcomm qcs8550_firmware
sw5100_firmware
sw5100p_firmware
wcn3660b_firmware
wcn3680b_firmware
wcn3980_firmware
wcn3988_firmware
wsa8830_firmware
wsa8835_firmware 		Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. Update CWE-125
Out-of-bounds Read 		CVE-2024-33061 2025-01-11 01:49 2025-01-6 Show GitHub Exploit DB Packet Storm