Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
431 5.4 警告
Network 		bdthemes prime slider bdthemes の WordPress 用 prime slider におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1507 2025-01-22 13:39 2024-03-13 Show GitHub Exploit DB Packet Storm
432 9.8 緊急
Network 		netentsec application security gateway netentsec の application security gateway における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-2021 2025-01-22 13:39 2024-03-1 Show GitHub Exploit DB Packet Storm
433 7.5 重要
Network 		Plone Foundation Plone Plone Foundation の Plone における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
CWE-276
CVE-2024-22889 2025-01-22 13:39 2024-03-6 Show GitHub Exploit DB Packet Storm
434 5.3 警告
Network 		WonderCMS WonderCMS WonderCMS におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
CWE-918
CVE-2024-27563 2025-01-22 13:39 2024-03-5 Show GitHub Exploit DB Packet Storm
435 6.5 警告
Adjacent 		FRRouting Project FRRouting FRRouting Project の FRRouting における脆弱性 CWE-noinfo
情報不足 		CVE-2024-27913 2025-01-22 13:39 2024-02-28 Show GitHub Exploit DB Packet Storm
436 9.8 緊急
Network 		XWiki xwiki XWiki の xwiki におけるコードインジェクションの脆弱性 CWE-94
CWE-95
CVE-2024-31982 2025-01-22 13:39 2024-04-10 Show GitHub Exploit DB Packet Storm
437 9.8 緊急
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2024-3484 2025-01-22 13:38 2024-05-15 Show GitHub Exploit DB Packet Storm
438 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 CWE-122
CWE-787
CVE-2025-21139 2025-01-22 12:25 2025-01-14 Show GitHub Exploit DB Packet Storm
439 7.8 重要
Local 		IBM IBM VIOS
IBM AIX 		IBM の IBM VIOS および IBM AIX における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-47115 2025-01-22 12:18 2024-12-5 Show GitHub Exploit DB Packet Storm
440 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビの Adobe Substance 3D Designer における境界外書き込みに関する脆弱性 CWE-122
CWE-787
CVE-2025-21137 2025-01-22 12:11 2025-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
721 - - - Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP c… - CVE-2024-24444 2025-01-22 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
722 - - - A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devices. - CVE-2023-50733 2025-01-22 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
723 6.6 MEDIUM
Network 		- - Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Services). The supported version that is affected is 11.2.19.0.000. Difficult to exploit… - CVE-2025-21569 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
724 4.3 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows… - CVE-2025-21567 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
725 7.3 HIGH
Local 		- - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnera… - CVE-2025-21571 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
726 6.1 MEDIUM
Network 		- - Vulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences Applications (component: Login). The supported version that is affected is 8.2.3. Easily exploitable vulnera… - CVE-2025-21570 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
727 4.5 MEDIUM
Network 		- - Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security). The supported version that is affected is 11.2.19.0.000. Easily exploi… - CVE-2025-21568 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
728 6.5 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows low privil… - CVE-2025-21566 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
729 7.5 HIGH
Network 		- - Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Install). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthe… - CVE-2025-21565 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm
730 8.1 HIGH
Network 		- - Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services). The supported version that is affected is 9.3.6. Easily exploitable vulnerabi… - CVE-2025-21564 2025-01-22 06:15 2025-01-22 Show GitHub Exploit DB Packet Storm