Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
461 7.8 重要
Local 		IBM Security Verify Access Docker IBM の Security Verify Access Docker における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2024-35140 2025-01-28 10:24 2024-05-30 Show GitHub Exploit DB Packet Storm
462 7.8 重要
Local 		クアルコム sa8255p ファームウェア
snapdragon auto 5g modem-rf gen 2 ファームウェア
qcn6274 ファームウェア
Snapdragon W5+ Gen 1 Wearable Platform ファームウェア… 		複数のクアルコム製品における解放済みメモリの使用に関する脆弱性 CWE-416
CWE-416
CVE-2023-43544 2025-01-28 10:24 2023-09-19 Show GitHub Exploit DB Packet Storm
463 4.8 警告
Network 		WPExperts password protected WPExperts の WordPress 用 password protected におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-0656 2025-01-28 10:24 2024-02-29 Show GitHub Exploit DB Packet Storm
464 5.4 警告
Network 		moveaddons move addons for elementor moveaddons の WordPress 用 move addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2131 2025-01-28 10:24 2024-03-23 Show GitHub Exploit DB Packet Storm
465 7.5 重要
Network 		Magma Magma Linux Foundation の Magma における境界外読み取りに関する脆弱性 CWE-120
CWE-125
CVE-2024-24417 2025-01-28 10:24 2024-01-25 Show GitHub Exploit DB Packet Storm
466 5.3 警告
Network 		JetBrains TeamCity JetBrains の TeamCity におけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
CWE-209
CVE-2024-36375 2025-01-28 10:24 2024-05-29 Show GitHub Exploit DB Packet Storm
467 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. w30e ファームウェア Shenzhen Tenda Technology Co.,Ltd. の w30e ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3879 2025-01-28 10:24 2024-04-16 Show GitHub Exploit DB Packet Storm
468 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. w30e ファームウェア Shenzhen Tenda Technology Co.,Ltd. の w30e ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3881 2025-01-28 10:24 2024-04-16 Show GitHub Exploit DB Packet Storm
469 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. tx9 pro ファームウェア Shenzhen Tenda Technology Co.,Ltd. の tx9 pro ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4111 2025-01-28 10:23 2024-04-24 Show GitHub Exploit DB Packet Storm
470 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. ax1806 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の ax1806 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-4237 2025-01-28 10:23 2024-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Authentication Bypass by Spoofing vulnerability in BestWebSoft Google Captcha allows Identity Spoofing. This issue affects Google Captcha: from n/a through 1.78. CWE-290
 Authentication Bypass by Spoofing 		CVE-2025-24628 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
852 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Music Store allows Reflected XSS. This issue affects Music Store: from n/a through 1.1… CWE-79
Cross-site Scripting 		CVE-2025-24626 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
853 - - - Missing Authorization vulnerability in Sprout Invoices Client Invoicing by Sprout Invoices allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Client Invoicing… CWE-862
 Missing Authorization 		CVE-2025-24606 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
854 - - - Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce products/orders. This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a th… CWE-862
 Missing Authorization 		CVE-2025-24603 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
855 - - - Missing Authorization vulnerability in David F. Carr RSVPMarker . This issue affects RSVPMarker : from n/a through 11.4.5. CWE-862
 Missing Authorization 		CVE-2025-24600 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
856 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge allows Reflected XSS. This issue affects Edwiser Bridge: from n/a throug… CWE-79
Cross-site Scripting 		CVE-2025-24593 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
857 - - - Missing Authorization vulnerability in Haptiq picu – Online Photo Proofing Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects picu – Online Photo Proo… CWE-862
 Missing Authorization 		CVE-2025-24590 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
858 - - - Cross-Site Request Forgery (CSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd allows Cross Site Request Forgery. This issue affects Coming Soon Page,… CWE-352
 Origin Validation Error 		CVE-2025-24540 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
859 - - - Cross-Site Request Forgery (CSRF) vulnerability in slaFFik BuddyPress Groups Extras allows Cross Site Request Forgery. This issue affects BuddyPress Groups Extras: from n/a through 3.6.10. CWE-352
 Origin Validation Error 		CVE-2025-24538 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
860 - - - Cross-Site Request Forgery (CSRF) vulnerability in The Events Calendar The Events Calendar allows Cross Site Request Forgery. This issue affects The Events Calendar: from n/a through 6.7.0. CWE-352
 Origin Validation Error 		CVE-2025-24537 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm