Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2022 Windows Update スタックの特権の昇格の脆弱性 New CWE-306
CWE-noinfo
CVE-2024-26235 2025-01-15 12:26 2024-04-9 Show GitHub Exploit DB Packet Storm
32 6.6 警告
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019 		Windows DNS サーバーのリモートでコードが実行される脆弱性 New CWE-416
CWE-noinfo
CVE-2024-26231 2025-01-15 12:10 2024-04-9 Show GitHub Exploit DB Packet Storm
33 7.5 重要
Network 		IBM IBM Maximo Application Suite IBM の IBM Maximo Application Suite におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2024-22328 2025-01-15 12:10 2024-04-5 Show GitHub Exploit DB Packet Storm
34 7.8 重要
Local 		IBM IBM Security Guardium IBM の IBM Security Guardium における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 New CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2023-47712 2025-01-15 12:10 2023-11-9 Show GitHub Exploit DB Packet Storm
35 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2016
Microso… 		Windows 分散ファイル システムの情報漏えいの脆弱性 New CWE-125
CWE-noinfo
CVE-2024-26226 2025-01-15 12:03 2024-04-9 Show GitHub Exploit DB Packet Storm
36 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2016
Microso… 		DHCP Server サービスのサービス拒否の脆弱性 New CWE-400
CWE-noinfo
CVE-2024-26212 2025-01-15 12:00 2024-04-9 Show GitHub Exploit DB Packet Storm
37 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window… 		Windows ルーティングとリモート アクセス サービス (RRAS) のリモートでコードが実行される脆弱性 New CWE-122
CWE-noinfo
CVE-2024-26205 2025-01-15 11:50 2024-04-9 Show GitHub Exploit DB Packet Storm
38 5.4 警告
Network 		IBM IBM Aspera Faspex IBM の IBM Aspera Faspex におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2023-37411 2025-01-15 11:45 2023-07-5 Show GitHub Exploit DB Packet Storm
39 7.5 重要
Network 		IBM IBM TXSeries for Multiplatforms IBM の IBM TXSeries for Multiplatforms における認証情報の不十分な保護に関する脆弱性 New CWE-522
認証情報の不十分な保護 		CVE-2024-22345 2025-01-15 11:45 2024-05-9 Show GitHub Exploit DB Packet Storm
40 8 重要
Adjacent 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-20
CWE-noinfo
CVE-2024-26189 2025-01-15 11:44 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 15, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
341 - - - In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute … New - CVE-2024-57487 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
342 - - - An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 512… New - CVE-2024-48883 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
343 - - - An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers. New - CVE-2024-46919 2025-01-14 05:15 2025-01-14 Show GitHub Exploit DB Packet Storm
344 - - - The Contact Form Master WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used… Update - CVE-2024-12587 2025-01-14 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
345 - - - Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity.php. Update - CVE-2024-54687 2025-01-14 05:15 2025-01-11 Show GitHub Exploit DB Packet Storm
346 7.5 HIGH
Network 		huawei harmonyos Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability. Update NVD-CWE-noinfo
CVE-2024-56437 2025-01-14 04:27 2025-01-8 Show GitHub Exploit DB Packet Storm
347 5.9 MEDIUM
Network 		huawei harmonyos Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Update CWE-362
Race Condition 		CVE-2024-54120 2025-01-14 04:27 2025-01-8 Show GitHub Exploit DB Packet Storm
348 - - - An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does not… New - CVE-2024-46921 2025-01-14 04:15 2025-01-14 Show GitHub Exploit DB Packet Storm
349 - - - Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint New - CVE-2024-46310 2025-01-14 04:15 2025-01-14 Show GitHub Exploit DB Packet Storm
350 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Breadcrumbs2 extension allows Cross-Site Scripting (XSS).… Update - CVE-2025-23078 2025-01-14 04:15 2025-01-11 Show GitHub Exploit DB Packet Storm