Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
571 6.1 警告
Network 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-11004 2025-01-20 10:40 2024-11-12 Show GitHub Exploit DB Packet Storm
572 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Stager アドビの Adobe Substance 3D Stager における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2025-21128 2025-01-20 10:19 2025-01-14 Show GitHub Exploit DB Packet Storm
573 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Stager アドビの Adobe Substance 3D Stager における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2025-21131 2025-01-20 10:19 2025-01-14 Show GitHub Exploit DB Packet Storm
574 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2023-52580 2025-01-20 10:00 2023-09-15 Show GitHub Exploit DB Packet Storm
575 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2024-35980 2025-01-20 10:00 2024-04-10 Show GitHub Exploit DB Packet Storm
576 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53166 2025-01-20 10:00 2024-11-29 Show GitHub Exploit DB Packet Storm
577 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53170 2025-01-20 10:00 2024-11-18 Show GitHub Exploit DB Packet Storm
578 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-54191 2025-01-20 10:00 2024-12-12 Show GitHub Exploit DB Packet Storm
579 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2024-56595 2025-01-20 09:59 2024-10-29 Show GitHub Exploit DB Packet Storm
580 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-56617 2025-01-20 09:59 2024-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 - - - Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3. New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-51919 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
472 - - - Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0. New CWE-266
 Incorrect Privilege Assignment 		CVE-2024-51888 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
473 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.… New CWE-89
SQL Injection 		CVE-2024-51818 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
474 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ARPrice allows Reflected XSS. This issue affects ARPrice: from n/a through 4.0.3. New CWE-79
Cross-site Scripting 		CVE-2024-49700 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
475 - - - Deserialization of Untrusted Data vulnerability in NotFound ARPrice allows Object Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49699 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
476 - - - Deserialization of Untrusted Data vulnerability in NotFound ARPrice allows Object Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-502
 Deserialization of Untrusted Data 		CVE-2024-49688 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
477 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound ARPrice allows SQL Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-89
SQL Injection 		CVE-2024-49666 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
478 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound ARPrice allows SQL Injection. This issue affects ARPrice: from n/a through 4.0.3. New CWE-89
SQL Injection 		CVE-2024-49655 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
479 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affec… New CWE-89
SQL Injection 		CVE-2024-49333 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
480 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affec… New CWE-89
SQL Injection 		CVE-2024-49303 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm