Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
51 5.4 警告
Network 		Brainstorm Force ultimate addons for beaver builder Brainstorm Force の WordPress 用 ultimate addons for beaver builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2144 2025-01-31 14:50 2024-03-30 Show GitHub Exploit DB Packet Storm
52 9.8 緊急
Network 		netentsec application security gateway netentsec の application security gateway における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-2646 2025-01-31 14:50 2024-03-19 Show GitHub Exploit DB Packet Storm
53 6.1 警告
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3547 2025-01-31 14:50 2024-05-14 Show GitHub Exploit DB Packet Storm
54 7.8 重要
Local 		Delta Electronics, INC. DIAScreen Delta Electronics, INC. の DIAScreen における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-39354 2025-01-31 14:50 2024-11-11 Show GitHub Exploit DB Packet Storm
55 5.4 警告
Network 		envothemes envo extra envothemes の WordPress 用 envo extra におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4385 2025-01-31 14:50 2024-05-16 Show GitHub Exploit DB Packet Storm
56 8.8 重要
Network 		unlimited-elements unlimited elements for elementor unlimited-elements の WordPress 用 unlimited elements for elementor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-4779 2025-01-31 14:50 2024-05-23 Show GitHub Exploit DB Packet Storm
57 5.4 警告
Network 		Wpmet elementskit Wpmet の WordPress 用 elementskit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-0321 2025-01-31 14:50 2025-01-28 Show GitHub Exploit DB Packet Storm
58 9.8 緊急
Network 		netentsec application security gateway netentsec の application security gateway における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-2649 2025-01-31 14:50 2024-03-20 Show GitHub Exploit DB Packet Storm
59 8.8 重要
Network 		Delta Electronics, INC. DIAEnergie Delta Electronics, INC. の DIAEnergie における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-34031 2025-01-31 14:50 2024-05-3 Show GitHub Exploit DB Packet Storm
60 4.9 警告
Network 		creativethemes blocksy companion creativethemes の WordPress 用 blocksy companion におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2024-35633 2025-01-31 14:50 2024-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1321 - - - Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potenti… CWE-923
 Improper Restriction of Communication Channel to Intended Endpoints 		CVE-2024-39271 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1322 - - - Improper access control in some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-284
Improper Access Control 		CVE-2024-38310 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1323 - - - Improper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow an authenticated user to potentially enable denial of service via network access. CWE-20
 Improper Input Validation  		CVE-2024-38307 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1324 - - - Improper access control in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-284
Improper Access Control 		CVE-2024-37355 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1325 - - - Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local… CWE-427
 Uncontrolled Search Path Element 		CVE-2024-36291 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1326 - - - Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local acc… CWE-362
Race Condition 		CVE-2024-36285 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1327 - - - Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-36283 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1328 - - - Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-36280 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1329 - - - Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial o… CWE-787
 Out-of-bounds Write 		CVE-2024-36274 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm
1330 - - - Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access. CWE-362
Race Condition 		CVE-2024-36262 2025-02-13 07:15 2025-02-13 Show GitHub Exploit DB Packet Storm