You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
|
Update Date":Jan. 22, 2025, 12:02 p.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
411 | 7 |
重要
Local |
Linux | Linux Kernel | Linux の Linux Kernel における競合状態に関する脆弱性 |
CWE-362 CWE-416 |
CVE-2024-53186 | 2025-01-17 18:04 | 2024-11-25 | Show | GitHub Exploit DB Packet Storm |
412 | 7.8 |
重要
Local |
Debian Linux |
Debian GNU/Linux Linux Kernel |
Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性 |
CWE-416
解放済みメモリの使用 |
CVE-2024-27395 | 2025-01-17 18:03 | 2024-04-24 | Show | GitHub Exploit DB Packet Storm |
413 | 7.8 |
重要
Local |
Linux | Linux Kernel | Linux の Linux Kernel における二重解放に関する脆弱性 |
CWE-415
二重解放 |
CVE-2024-26653 | 2025-01-17 17:59 | 2024-03-26 | Show | GitHub Exploit DB Packet Storm |
414 | 5.5 |
警告
Local |
Linux | Linux Kernel | Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 |
CWE-476
NULL ポインタデリファレンス |
CVE-2021-47217 | 2025-01-17 17:57 | 2021-11-15 | Show | GitHub Exploit DB Packet Storm |
415 | 5.5 |
警告
Local |
Linux | Linux Kernel | Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 |
CWE-401
有効期限後のメモリの解放の欠如 |
CVE-2023-52643 | 2025-01-17 17:57 | 2023-12-8 | Show | GitHub Exploit DB Packet Storm |
416 | 4.7 |
警告
Local |
Linux | Linux Kernel | Linux の Linux Kernel における競合状態に関する脆弱性 |
CWE-362
競合状態 |
CVE-2023-52785 | 2025-01-17 17:57 | 2023-11-8 | Show | GitHub Exploit DB Packet Storm |
417 | 7.1 |
重要
Local |
Linux | Linux Kernel | Linux の Linux Kernel における境界外読み取りに関する脆弱性 |
CWE-125
境界外読み取り |
CVE-2024-38560 | 2025-01-17 17:52 | 2024-05-6 | Show | GitHub Exploit DB Packet Storm |
418 | 5.5 |
警告
Local |
Linux | Linux Kernel | Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 |
CWE-476
NULL ポインタデリファレンス |
CVE-2021-47211 | 2025-01-17 17:49 | 2021-10-26 | Show | GitHub Exploit DB Packet Storm |
419 | 7.8 |
重要
Local |
Linux | Linux Kernel | Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 |
CWE-416
解放済みメモリの使用 |
CVE-2021-47106 | 2025-01-17 17:49 | 2021-12-15 | Show | GitHub Exploit DB Packet Storm |
420 | 7.5 |
重要
Network マイクロソフト |
Microsoft Windows Server 2025 |
Microsoft Windows Server 2008 Microsoft Windows Server 2022 Microsoft Windows 11 Microsoft Window…
Windows ライトウェイト ディレクトリ アクセス プロトコル (LDAP) のサービス拒否の脆弱性
|
CWE-125 |
CWE-noinfo
CVE-2024-49113
|
2025-01-17 17:46 |
2024-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
Update Date:Jan. 22, 2025, 4:11 a.m.
No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
---|---|---|---|---|---|---|---|---|---|---|---|
541 | 7.8 |
HIGH
Local |
adobe | illustrator | Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user… |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2025-21134 | 2025-01-17 05:43 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
542 | 8.8 |
HIGH
Network |
chrome | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CWE-125
Out-of-bounds Read |
CVE-2025-0437 | 2025-01-17 05:35 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm | |
543 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2022_23h2 windows_11_23h2 windows_10_1607 windows_10_1809 windows_10_1507 windows_10_21h2 windows_10_22h2 windows_11_… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21417 | 2025-01-17 05:34 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
544 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21413 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
545 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21411 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
546 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2025 windows_server_2022_23h2 windows_10_1507 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows… |
Windows Telephony Service Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2025-21409 | 2025-01-17 05:33 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
547 | - | - | - | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in carrotbits Greek Namedays Widget From Eortologio.Net allows Stored XSS.This issue affects Greek N… |
CWE-79
Cross-site Scripting |
CVE-2025-23783 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm | |
548 | - | - | - | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Revolutionart Marmoset Viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a thro… |
CWE-79
Cross-site Scripting |
CVE-2025-23767 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm | |
549 | - | - | - | Cross-Site Request Forgery (CSRF) vulnerability in Mahdi Khaksar mybb Last Topics allows Stored XSS.This issue affects mybb Last Topics: from n/a through 1.0. |
CWE-352
Origin Validation Error |
CVE-2025-23749 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm | |
550 | - | - | - | Cross-Site Request Forgery (CSRF) vulnerability in Tussendoor internet & marketing Call me Now allows Stored XSS.This issue affects Call me Now: from n/a through 1.0.5. |
CWE-352
Origin Validation Error |
CVE-2025-23745 | 2025-01-17 05:15 | 2025-01-17 | Show | GitHub Exploit DB Packet Storm |