Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 20, 2025, 2:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
581	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	W15E ファームウェア	Shenzhen Tenda Technology Co.,Ltd. の W15E ファームウェアにおける境界外書き込みに関する脆弱性	CWE-121 CWE-787	CVE-2024-4119	2025-01-16 11:26	2024-04-24	Show	GitHub Exploit DB Packet Storm

582	5.4	警告 Network	Leap13	Premium Addons for Elementor	Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-4376	2025-01-16 11:26	2024-05-31	Show	GitHub Exploit DB Packet Storm

583	5.4	警告 Network	Leap13	Premium Addons for Elementor	Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-6495	2025-01-16 11:26	2024-07-12	Show	GitHub Exploit DB Packet Storm

584	7.8	重要 Local	クアルコム	qfw7124 ファームウェア AR8035 ファームウェア qamsrv1h ファームウェア SA6145P ファームウェア qcn6274 ファームウェア qcn6224 ファームウェア qamsrv1m ファームウェア QCA6584AU ファームウェア QCA8…	複数のクアルコム製品における古典的バッファオーバーフローの脆弱性	CWE-120 CWE-120	CVE-2023-43525	2025-01-16 11:16	2023-09-19	Show	GitHub Exploit DB Packet Storm

585	4.3	警告 Network	Basixonline	NEX-Forms	Basixonline の WordPress 用 NEX-Forms における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-0907	2025-01-16 11:16	2024-02-29	Show	GitHub Exploit DB Packet Storm

586	6.5	警告 Network	servit	affiliate-toolkit	servit の WordPress 用 affiliate-toolkit における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-1851	2025-01-16 11:16	2024-03-8	Show	GitHub Exploit DB Packet Storm

587	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	fh1203 ファームウェア	Shenzhen Tenda Technology Co.,Ltd. の fh1203 ファームウェアにおける境界外書き込みに関する脆弱性	CWE-121 CWE-787	CVE-2024-2988	2025-01-16 11:16	2024-03-27	Show	GitHub Exploit DB Packet Storm

588	8.8	重要 Network	DesDev Inc.	DedeCMS	DesDev Inc. の DedeCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2024-3148	2025-01-16 11:16	2024-04-2	Show	GitHub Exploit DB Packet Storm

589	7.8	重要 Local	Rockwell Automation	Arena	Rockwell Automation の Arena における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-12175	2025-01-16 10:40	2024-12-19	Show	GitHub Exploit DB Packet Storm

590	5.4	警告 Network	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows 10 Microsoft Windows Server 2022 Microsoft Windows Server 2016 Microsoft Window…	Windows Mark Of The Web セキュリティ機能のバイパスの脆弱性	CWE-693 CWE-noinfo	CVE-2024-30050	2025-01-15 18:15	2024-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251	4.0	MEDIUM Local	-	-	IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data.	CWE-471 Modification of Assumed-Immutable Data (MAID)	CVE-2024-51462	2025-01-17 12:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

252	-		-	-	A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.	-	CVE-2024-12806	2025-01-17 12:15	2025-01-9	Show	GitHub Exploit DB Packet Storm

253	-		-	-	A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.	-	CVE-2024-12805	2025-01-17 12:15	2025-01-9	Show	GitHub Exploit DB Packet Storm

254	-		-	-	A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.	-	CVE-2024-12803	2025-01-17 12:15	2025-01-9	Show	GitHub Exploit DB Packet Storm

255	6.5	MEDIUM Network	-	-	IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../…	CWE-22 Path Traversal	CVE-2024-52363	2025-01-17 11:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

256	7.8	HIGH Local	-	-	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2025-21325	2025-01-17 10:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

257	-		-	-	Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.	CWE-121 Stack-based Buffer Overflow	CVE-2024-34579	2025-01-17 10:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

258	-		-	-	librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to Cross-site Scripting (XSS) on the parameters:`/addhost` -> param: community. Librenms versions u…	CWE-79 Cross-site Scripting	CVE-2025-23201	2025-01-17 08:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

259	-		-	-	librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: `ajax_form.php` -> param: state. Librenms versions up to 24.10.1 …	CWE-79 Cross-site Scripting	CVE-2025-23200	2025-01-17 08:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

260	-		-	-	librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: `/ajax_form.php` -> param: descr. Librenms version up to 24.10.1 …	CWE-79 Cross-site Scripting	CVE-2025-23199	2025-01-17 08:15	2025-01-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed