Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 21, 2025, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
551	7.8	重要 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2024-26704	2025-01-17 09:44	2024-01-18	Show	GitHub Exploit DB Packet Storm

552	7.8	重要 Local	Debian Linux	Linux Kernel Debian GNU/Linux	Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-27396	2025-01-17 09:44	2024-04-24	Show	GitHub Exploit DB Packet Storm

553	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-53171	2025-01-17 09:44	2024-11-14	Show	GitHub Exploit DB Packet Storm

554	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-56604	2025-01-17 09:44	2024-10-15	Show	GitHub Exploit DB Packet Storm

555	4.3	警告 Network	IBM	IBM InfoSphere Information Server	IBM の IBM InfoSphere Information Server におけるエラーメッセージによる情報漏えいに関する脆弱性	CWE-209 エラーメッセージによる情報漏えい	CVE-2024-51460	2025-01-17 08:52	2024-12-5	Show	GitHub Exploit DB Packet Storm

556	6.8	警告 Physics	Huawei	Yale-AL50A ファームウェア Princeton-AL10D ファームウェア P30 Pro ファームウェア Yale-AL00A ファームウェア Mate 20 ファームウェア P30 ファームウェア YaleP-AL10B ファームウェア	複数の Huawei 製品における不正な認証に関する脆弱性	CWE-285 CWE-863	CVE-2020-9081	2025-01-16 18:13	2020-02-18	Show	GitHub Exploit DB Packet Storm

557	7.5	重要 Network	マイクロソフト	Microsoft Copilot Studio	Copilot Studio の情報漏えいの脆弱性	CWE-200 CWE-noinfo	CVE-2024-43610	2025-01-16 18:08	2024-10-8	Show	GitHub Exploit DB Packet Storm

558	7.5	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Window…	Windows Hyper-V のリモートでコードが実行される脆弱性	CWE-20 CWE-829 CWE-noinfo	CVE-2024-30092	2025-01-16 18:05	2024-10-8	Show	GitHub Exploit DB Packet Storm

559	4.1	警告 Physics	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Window…	セキュアブートのセキュリティ機能のバイパスの脆弱性	CWE-284 CWE-noinfo	CVE-2024-28922	2025-01-16 18:05	2024-04-9	Show	GitHub Exploit DB Packet Storm

560	8.8	重要 Local	マイクロソフト	Xbox Gaming Services	XBox ゲームサービスの特権昇格の脆弱性	CWE-59 CWE-noinfo	CVE-2024-28916	2025-01-16 18:02	2024-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 21, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
361	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Allan Wallick Blog Summary allows Stored XSS.This issue affects Blog Summary: from n/a thro…	CWE-79 Cross-site Scripting	CVE-2025-23887	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

362	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Roberts Annie allows Stored XSS.This issue affects Annie: from n/a through 2.1.1.	CWE-79 Cross-site Scripting	CVE-2025-23886	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

363	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Chris Roberts Annie allows Cross Site Request Forgery.This issue affects Annie: from n/a through 2.1.1.	CWE-352 Origin Validation Error	CVE-2025-23884	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

364	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in anmari amr personalise allows Cross Site Request Forgery.This issue affects amr personalise: from n/a through 2.10.	CWE-352 Origin Validation Error	CVE-2025-23880	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

365	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Post-to-Post Links allows Stored XSS.This issue affects Post-to-Post Links: from n/a…	CWE-79 Cross-site Scripting	CVE-2025-23878	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

366	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nitethemes Nite Shortcodes allows Stored XSS.This issue affects Nite Shortcodes: from n/a through…	CWE-79 Cross-site Scripting	CVE-2025-23877	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

367	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jens Remus WP krpano allows Stored XSS.This issue affects WP krpano: from n/a through 1.2.1.	CWE-79 Cross-site Scripting	CVE-2025-23876	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

368	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Tim Ridgway Better Protected Pages allows Stored XSS.This issue affects Better Protected Pages: from n/a through 1.0.	CWE-352 Origin Validation Error	CVE-2025-23875	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

369	-	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anshi Solutions Category D3 Tree allows Stored XSS.This issue affects Category D3 Tree: from n/a …	CWE-79 Cross-site Scripting	CVE-2025-23873	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

370	-	-	-	Cross-Site Request Forgery (CSRF) vulnerability in PayForm PayForm allows Stored XSS.This issue affects PayForm: from n/a through 2.0.	CWE-352 Origin Validation Error	CVE-2025-23872	2025-01-17 06:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed