Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Jan. 20, 2025, 10:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 411 | 8.8 |
重要
Network |
Shenzhen Tenda Technology Co.,Ltd. | W15E ファームウェア | Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性 |
CWE-121 CWE-787 |
CVE-2024-4116 | 2025-01-16 16:42 | 2024-04-24 | Show | GitHub Exploit DB Packet Storm |
| 412 | 6.5 |
警告
Network ThimPress |
LearnPress
|
ThimPress の WordPress 用 LearnPress における認証の欠如に関する脆弱性
|
CWE-862
|
認証の欠如
CVE-2024-4444
|
2025-01-16 16:42 |
2024-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 413 | 5.4 |
警告
Network |
WPDeveloper | Essential Addons for Elementor | WPDeveloper の WordPress 用 Essential Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2024-5073 | 2025-01-16 16:42 | 2024-05-30 | Show | GitHub Exploit DB Packet Storm |
| 414 | 7.8 |
重要
Local |
クアルコム |
QCA6696 ファームウェア QCA6584AU ファームウェア QCA6391 ファームウェア qamsrv1h ファームウェア fastconnect 7800 ファームウェア fastconnect 6800 ファームウェア fastconnect 6900&nb… |
複数のクアルコム製品における古典的バッファオーバーフローの脆弱性 |
CWE-120 CWE-120 |
CVE-2023-43524 | 2025-01-16 16:42 | 2023-09-19 | Show | GitHub Exploit DB Packet Storm |
| 415 | 5.4 |
警告
Network |
Jegtheme | Jeg Elementor Kit | Jegtheme の WordPress 用 Jeg Elementor Kit におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2024-0334 | 2025-01-16 16:42 | 2024-05-1 | Show | GitHub Exploit DB Packet Storm |
| 416 | 5.4 |
警告
Network |
Livemesh | Livemesh Addons for Elementor | Livemesh の WordPress 用 Livemesh Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2024-1235 | 2025-01-16 16:42 | 2024-02-29 | Show | GitHub Exploit DB Packet Storm |
| 417 | 7.8 |
重要
Local |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows Server 2022 Microsoft Windows 10 Microsoft Windows 11 |
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
CWE-122 CWE-noinfo |
CVE-2025-21333 | 2025-01-16 16:28 | 2025-01-14 | Show | GitHub Exploit DB Packet Storm |
| 418 | 8.8 |
重要
Network |
マイクロソフト |
Microsoft SQL Server Microsoft OLE DB Driver |
SQL Server 用 Microsoft OLE DB ドライバーのリモートでコードが実行される脆弱性 |
CWE-122 CWE-noinfo |
CVE-2024-28926 | 2025-01-16 16:19 | 2024-04-9 | Show | GitHub Exploit DB Packet Storm |
| 419 | 6.8 |
警告
Physics |
Huawei | Myna ファームウェア | Huawei の Myna ファームウェアにおけるデータの整合性検証不備に関する脆弱性 |
CWE-354 CWE-354 |
CVE-2020-9210 | 2025-01-16 16:11 | 2020-02-18 | Show | GitHub Exploit DB Packet Storm |
| 420 | 7.8 |
重要
Local |
Huawei | FusionCompute ファームウェア | Huawei の FusionCompute ファームウェアにおける脆弱性 |
CWE-269 CWE-noinfo |
CVE-2020-9222 | 2025-01-16 16:11 | 2020-02-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Jan. 20, 2025, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 411 | 9.8 |
CRITICAL
Network
ivanti
|
avalanche
|
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.
|
CWE-22
|
Path Traversal
CVE-2024-13179
|
2025-01-17 06:01 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 412 | 7.8 |
HIGH
Local |
adobe | illustrator | Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2025-21134 | 2025-01-17 05:43 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 413 | 8.8 |
HIGH
Network |
chrome | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CWE-125
Out-of-bounds Read |
CVE-2025-0437 | 2025-01-17 05:35 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm | |
| 414 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_11_23h2 windows_10_1607 windows_10_1809 windows_10_1507 windows_10_21h2 windows_10_22h2 windows_11_… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21417 | 2025-01-17 05:34 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 415 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21413 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 416 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21411 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 417 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21409 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 418 | - | - | - | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in carrotbits Greek Namedays Widget From Eortologio.Net allows Stored XSS.This issue affects Greek N… |
CWE-79
Cross-site Scripting |
CVE-2025-23783 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm | |
| 419 | - | - | - | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Revolutionart Marmoset Viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a thro… |
CWE-79
Cross-site Scripting |
CVE-2025-23767 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm | |
| 420 | - | - | - | Cross-Site Request Forgery (CSRF) vulnerability in Mahdi Khaksar mybb Last Topics allows Stored XSS.This issue affects mybb Last Topics: from n/a through 1.0. |
CWE-352
Origin Validation Error |
CVE-2025-23749 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm |