Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
471 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
CWE-416
CVE-2024-26734 2025-01-17 16:21 2024-02-20 Show GitHub Exploit DB Packet Storm
472 5.4 警告
Network 		Themeisle RSS Aggregator by Feedzy ThemeIsle の WordPress 用 RSS Aggregator by Feedzy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2023-6877 2025-01-17 16:20 2023-12-15 Show GitHub Exploit DB Packet Storm
473 5.3 警告
Network 		Huawei HarmonyOS Huawei の HarmonyOS における認証に関する脆弱性 CWE-287
CWE-287
CVE-2024-56445 2025-01-17 16:20 2024-12-26 Show GitHub Exploit DB Packet Storm
474 7.5 重要
Network 		Huawei HarmonyOS Huawei の HarmonyOS における脆弱性 CWE-20
CWE-noinfo
CVE-2024-54121 2025-01-17 16:20 2024-11-29 Show GitHub Exploit DB Packet Storm
475 7.5 重要
Network 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における不適切なデフォルトパーミッションに関する脆弱性 CWE-269
CWE-276
CVE-2024-56447 2025-01-17 16:20 2024-12-26 Show GitHub Exploit DB Packet Storm
476 7.5 重要
Network 		Huawei EMUI
HarmonyOS 		Huawei の EMUI および HarmonyOS における脆弱性 CWE-840
CWE-noinfo
CVE-2024-56438 2025-01-17 16:20 2024-12-26 Show GitHub Exploit DB Packet Storm
477 5.5 警告
Local 		クアルコム qam8775p ファームウェア
QCA6595 ファームウェア
sa8650p ファームウェア
sa8540p ファームウェア
QAM8295P ファームウェア
qamsrv1h ファームウェア
QCA6696 ファームウェア
sa7775p ファームウェア
sa87… 		複数のクアルコム製品における境界外読み取りに関する脆弱性 CWE-125
CWE-126
CVE-2024-45559 2025-01-17 16:18 2024-09-2 Show GitHub Exploit DB Packet Storm
478 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-47341 2025-01-17 16:18 2021-07-14 Show GitHub Exploit DB Packet Storm
479 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2986 2025-01-17 16:17 2024-03-27 Show GitHub Exploit DB Packet Storm
480 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の FH1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2985 2025-01-17 16:17 2024-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 - - - Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and respo… CWE-79
Cross-site Scripting 		CVE-2025-23039 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
272 6.3 MEDIUM
Network 		- - A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /expadd.php. The manipulation of the arg… CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0540 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
273 - - - The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC cus… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2025-23206 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
274 - - - nbgrader is a system for assigning and grading notebooks. Enabling frame-ancestors: 'self' grants any JupyterHub user the ability to extract formgrader content by sending malicious links to users wit… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2025-23205 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
275 - - - stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The application registe… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2025-21606 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
276 - - - WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php. - CVE-2024-57035 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
277 - - - WeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of documentos_funcionario.php. - CVE-2024-57033 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
278 - - - Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability - CVE-2025-21399 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
279 - - - Wegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php via the id parameter. - CVE-2024-57030 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
280 - - - A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Code/log… - CVE-2025-0534 2025-01-18 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm