Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 3, 2025, 1:14 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 41 | 8.8 |
重要
Network |
Delta Electronics, INC. | DIAEnergie | Delta Electronics, INC. の DIAEnergie における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2024-34032 | 2025-01-31 15:16 | 2024-05-3 | Show | GitHub Exploit DB Packet Storm |
| 42 | 5.4 |
警告
Network |
Brainstorm Force | Elementor Header & Footer Builder | Brainstorm Force の WordPress 用 Elementor Header & Footer Builder におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2024-4634 | 2025-01-31 15:16 | 2024-05-16 | Show | GitHub Exploit DB Packet Storm |
| 43 | 6.5 |
警告
Network |
JetBrains | YouTrack | JetBrains の YouTrack における非効率的な正規表現の複雑さに関する脆弱性 |
CWE-1333
非効率的な正規表現の複雑さ |
CVE-2024-54157 | 2025-01-31 15:16 | 2024-12-4 | Show | GitHub Exploit DB Packet Storm |
| 44 | 6.1 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2025-24459 | 2025-01-31 15:16 | 2025-01-21 | Show | GitHub Exploit DB Packet Storm |
| 45 | 6.5 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity における認証の欠如に関する脆弱性 |
CWE-862
認証の欠如 |
CVE-2025-24461 | 2025-01-31 15:16 | 2025-01-21 | Show | GitHub Exploit DB Packet Storm |
| 46 | 6.1 |
警告
Network |
Esri | Portal for ArcGIS | Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2024-8149 | 2025-01-31 15:01 | 2024-10-4 | Show | GitHub Exploit DB Packet Storm |
| 47 | 4.3 |
警告
Network |
JetBrains | TeamCity | JetBrains の TeamCity における不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2025-24460 | 2025-01-31 15:01 | 2025-01-21 | Show | GitHub Exploit DB Packet Storm |
| 48 | 8.8 |
重要
Network |
weDevs | wp erp | weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2024-0608 | 2025-01-31 14:50 | 2024-03-29 | Show | GitHub Exploit DB Packet Storm |
| 49 | 7.2 |
重要
Network |
weDevs | wp erp | weDevs の WordPress 用 wp erp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2024-0913 | 2025-01-31 14:50 | 2024-03-29 | Show | GitHub Exploit DB Packet Storm |
| 50 | 5.4 |
警告
Network |
Brainstorm Force | ultimate addons for beaver builder | Brainstorm Force の WordPress 用 ultimate addons for beaver builder におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2024-2140 | 2025-01-31 14:50 | 2024-03-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Feb. 21, 2025, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1191 | 7.8 |
HIGH
Local |
- | - | Microsoft Excel Information Disclosure Vulnerability |
CWE-125
Out-of-bounds Read |
CVE-2025-21383 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1192 | 7.8 |
HIGH
Local |
- | - | Microsoft Excel Remote Code Execution Vulnerability |
CWE-822
Untrusted Pointer Dereference |
CVE-2025-21381 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1193 | 8.1 |
HIGH
Network |
- | - | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CWE-362 CWE-191 CWE-122 Race Condition Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow |
CVE-2025-21376 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1194 | 7.8 |
HIGH
Local |
- | - | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CWE-20 CWE-122 Improper Input Validation Heap-based Buffer Overflow |
CVE-2025-21375 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1195 | 7.8 |
HIGH
Local |
- | - | Windows Installer Elevation of Privilege Vulnerability |
CWE-59
Link Following |
CVE-2025-21373 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1196 | 8.8 |
HIGH
Network |
- | - | Windows Telephony Service Remote Code Execution Vulnerability |
CWE-122
Heap-based Buffer Overflow |
CVE-2025-21371 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1197 | 8.8 |
HIGH
Network |
- | - | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CWE-190 CWE-122 Integer Overflow or Wraparound Heap-based Buffer Overflow |
CVE-2025-21369 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1198 | 8.8 |
HIGH
Network |
- | - | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CWE-122
Heap-based Buffer Overflow |
CVE-2025-21368 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1199 | 7.8 |
HIGH
Local |
- | - | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CWE-416
Use After Free |
CVE-2025-21367 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |
| 1200 | 7.8 |
HIGH
Local |
- | - | Windows Kernel Security Feature Bypass Vulnerability |
CWE-284
Improper Access Control |
CVE-2025-21359 | 2025-02-12 03:15 | 2025-02-12 | Show | GitHub Exploit DB Packet Storm |