Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
51 7.8 重要
Local
Google Android Google の Android における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2018-9389 2025-01-24 14:04 2018-04-5 Show GitHub Exploit DB Packet Storm
52 9.8 緊急
Network
デル smartfabric os10 デルの smartfabric os10 における OS コマンドインジェクションの脆弱性 New CWE-20
CWE-78
CVE-2023-32462 2025-01-24 14:04 2023-05-9 Show GitHub Exploit DB Packet Storm
53 7.8 重要
Local
F5 Networks BIG-IP Next Cloud-Native Network Functions F5 Networks の BIG-IP Next Cloud-Native Network Functions における脆弱性 New CWE-522
CWE-noinfo
CVE-2024-23306 2025-01-24 13:58 2024-02-14 Show GitHub Exploit DB Packet Storm
54 9.8 緊急
Network
PHOENIX CONTACT charx sec-3100 ファームウェア
charx sec-3050 ファームウェア
charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
複数の PHOENIX CONTACT 製品におけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 New CWE-1188
リソースの安全ではないデフォルト値への初期化
CVE-2024-6788 2025-01-24 13:51 2024-08-13 Show GitHub Exploit DB Packet Storm
55 7.8 重要
Local
インテル graphics performance analyzers インテルの graphics performance analyzers における脆弱性 New CWE-284
CWE-noinfo
CVE-2023-40071 2025-01-24 13:51 2023-10-12 Show GitHub Exploit DB Packet Storm
56 4.8 警告
Network
WP Ninjas, LLC. Ninja Forms Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-50515 2025-01-24 13:51 2024-11-19 Show GitHub Exploit DB Packet Storm
57 5.4 警告
Network
Nextcloud Nextcloud Server Nextcloud の Nextcloud Server における不正な認証に関する脆弱性 New CWE-287
CWE-863
CVE-2024-52518 2025-01-24 13:51 2024-11-15 Show GitHub Exploit DB Packet Storm
58 7.5 重要
Network
EBM Technologies RISWEB EBM Technologies の RISWEB における重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説
CVE-2024-26263 2025-01-24 13:45 2024-02-15 Show GitHub Exploit DB Packet Storm
59 5.5 警告
Local
radare radare2 radare の radare2 における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2024-26475 2025-01-24 13:45 2024-03-14 Show GitHub Exploit DB Packet Storm
60 6.5 警告
Network
ZyXEL NAS 542 ファームウェア
NAS 326 ファームウェア
ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける脆弱性 New CWE-269
CWE-noinfo
CVE-2024-29976 2025-01-24 13:45 2024-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rara Theme UltraLight allows Reflected XSS. This issue affects UltraLight: from n/a through 1.2. CWE-79
Cross-site Scripting
CVE-2025-23998 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
682 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dev@tamara.co Tamara Checkout allows Stored XSS. This issue affects Tamara Checkout: from n/a thr… CWE-79
Cross-site Scripting
CVE-2025-23997 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
683 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Desk Flexible PDF Coupons allows Stored XSS. This issue affects Flexible PDF Coupons: from n/a… CWE-79
Cross-site Scripting
CVE-2025-22825 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
684 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1. CWE-79
Cross-site Scripting
CVE-2025-22763 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
685 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TaxoPress WordPress Tag Cloud Plugin – Tag Groups allows Reflected XSS. This issue affects WordPr… CWE-79
Cross-site Scripting
CVE-2025-22735 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
686 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPHocus My auctions allegro allows Reflected XSS. This issue affects My auctions allegro: from n/… CWE-79
Cross-site Scripting
CVE-2025-22733 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
687 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Admiral Ad Blocking Detector allows Stored XSS. This issue affects Ad Blocking Detector: from n/a… CWE-79
Cross-site Scripting
CVE-2025-22732 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
688 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS. This issue affects MailChimp Subscribe Fo… CWE-79
Cross-site Scripting
CVE-2025-22727 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
689 - - - Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Upload a Web Shell to a Web Server. This issue affects Barcode Scann… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2025-22723 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm
690 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E4J s.r.l. VikAppointments Services Booking Calendar allows Stored XSS. This issue affects VikApp… CWE-79
Cross-site Scripting
CVE-2025-22719 2025-01-21 23:15 2025-01-21 Show GitHub Exploit DB Packet Storm