Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
581	8.8	重要 Network	マイクロソフト	Microsoft Windows Server 2022 Microsoft Windows Server 2008 Microsoft Windows Server 2012 Microsoft Windows Server 2025 Microso…	Windows テレフォニーサービスのリモートでコードが実行される脆弱性	CWE-122 CWE-noinfo	CVE-2025-21233	2025-01-27 12:17	2025-01-14	Show	GitHub Exploit DB Packet Storm

582	5.3	警告 Network	F5 Networks Fedora Project	nginx open source Fedora NGINX plus	F5 Networks の nginx open source 等複数ベンダの製品における NULL ポインタデリファレンスに関する脆弱性	CWE-476 CWE-476	CVE-2024-35200	2025-01-27 12:12	2024-05-29	Show	GitHub Exploit DB Packet Storm

583	4.8	警告 Network	F5 Networks Fedora Project	nginx open source Fedora NGINX plus	F5 Networks の nginx open source 等複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-121 CWE-787	CVE-2024-31079	2025-01-27 12:10	2024-05-29	Show	GitHub Exploit DB Packet Storm

584	9.8	緊急 Network	online job portal project	online job portal	code-projects の Online Job Portal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2023-41014	2025-01-27 11:55	2023-08-22	Show	GitHub Exploit DB Packet Storm

585	9.6	緊急 Network	Martin Barker	RenderTune	Martin Barker の RenderTune におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-25292	2025-01-27 11:55	2024-02-29	Show	GitHub Exploit DB Packet Storm

586	7.2	重要 Network	ZyXEL	VMG4005-B50B ファームウェア emg6726-b10a ファームウェア vmg4005-b60a ファームウェア vmg4005-b50a ファームウェア vmg3927-b50b ファームウェア VMG4927-B50A ファームウェア	複数の ZyXEL 製品における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-9200	2025-01-27 11:55	2024-12-3	Show	GitHub Exploit DB Packet Storm

587	9.8	緊急 Network	デル	Enterprise Storage Integrator for SAP Landscape Management	デルの Enterprise Storage Integrator for SAP Landscape Management における脆弱性	CWE-284 CWE-noinfo	CVE-2023-39244	2025-01-27 11:41	2023-07-26	Show	GitHub Exploit DB Packet Storm

588	7.5	重要 Network	Comarch SA	Comarch ERP XL	Comarch SA の Comarch ERP XL におけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 CWE-798	CVE-2023-4539	2025-01-27 11:41	2023-08-25	Show	GitHub Exploit DB Packet Storm

589	9.8	緊急 Network	utarit	SoliPay Mobile App	utarit の SoliPay Mobile App における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2023-5155	2025-01-27 11:41	2023-09-25	Show	GitHub Exploit DB Packet Storm

590	8.1	重要 Network	Schneider Electric	Modicon M580 BMEP582020 ファームウェア Modicon M580 BMEP581020 ファームウェア Modicon M340 BMXP342030 ファームウェア Modicon M340 BMXP342000 ファームウェア	複数の Schneider Electric 製品における通信チャネルで送信中のメッセージの整合性への不適切な強制に関する脆弱性	CWE-924 通信チャネルで送信中のメッセージの整合性への不適切な強制	CVE-2023-6408	2025-01-27 11:41	2023-11-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1421	-		-	-	Improper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to launch activities in MediaController's privilege.	-	CVE-2025-20902	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1422	-		-	-	Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory.	-	CVE-2025-20901	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1423	-		-	-	Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-bounds memory.	-	CVE-2025-20900	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1424	-		-	-	Improper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7 in Android 13, and 15.1.00.5 in Android 14 allows local attackers to access sensitive information.	-	CVE-2025-20899	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1425	-		-	-	Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles.	-	CVE-2025-20898	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1426	-		-	-	Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows local attacker to access data in Secure Folder.	-	CVE-2025-20897	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1427	-		-	-	Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information.	-	CVE-2025-20896	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1428	-		-	-	Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard.	-	CVE-2025-20895	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1429	-		-	-	Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multiple user profiles.	-	CVE-2025-20894	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

1430	4.3	MEDIUM Network	-	-	The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.5 via the 'bsb-slider' shortcode due to insufficient r…	CWE-284 Improper Access Control	CVE-2024-13514	2025-02-4 17:15	2025-02-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed