Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
601 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2016
Microso… 		Windows 分散ファイル システムの情報漏えいの脆弱性 CWE-125
CWE-noinfo
CVE-2024-26226 2025-01-15 12:03 2024-04-9 Show GitHub Exploit DB Packet Storm
602 7.5 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2016
Microso… 		DHCP Server サービスのサービス拒否の脆弱性 CWE-400
CWE-noinfo
CVE-2024-26212 2025-01-15 12:00 2024-04-9 Show GitHub Exploit DB Packet Storm
603 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Window… 		Windows ルーティングとリモート アクセス サービス (RRAS) のリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-26205 2025-01-15 11:50 2024-04-9 Show GitHub Exploit DB Packet Storm
604 5.4 警告
Network 		IBM IBM Aspera Faspex IBM の IBM Aspera Faspex におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2023-37411 2025-01-15 11:45 2023-07-5 Show GitHub Exploit DB Packet Storm
605 7.5 重要
Network 		IBM IBM TXSeries for Multiplatforms IBM の IBM TXSeries for Multiplatforms における認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2024-22345 2025-01-15 11:45 2024-05-9 Show GitHub Exploit DB Packet Storm
606 8 重要
Adjacent 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-20
CWE-noinfo
CVE-2024-26189 2025-01-15 11:44 2024-04-9 Show GitHub Exploit DB Packet Storm
607 7.8 重要
Local 		マイクロソフト Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022 		Windows 認証の特権の昇格の脆弱性 CWE-59
CWE-noinfo
CVE-2024-21447 2025-01-15 11:39 2024-04-9 Show GitHub Exploit DB Packet Storm
608 6.5 警告
Network 		マイクロソフト Azure Compute Gallery Azure Compute Gallery の特権の昇格の脆弱性 CWE-284
CWE-noinfo
CVE-2024-21424 2025-01-15 11:39 2024-04-9 Show GitHub Exploit DB Packet Storm
609 6.7 警告
Local 		マイクロソフト Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows 11
Microsoft Windows Server&… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-693
CWE-noinfo
CVE-2024-20669 2025-01-15 11:23 2024-04-9 Show GitHub Exploit DB Packet Storm
610 8.1 重要
Network 		マイクロソフト Microsoft Outlook Outlook for Windows スプーフィングの脆弱性 CWE-20
CWE-noinfo
CVE-2024-20670 2025-01-15 11:23 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service w… New - CVE-2017-13322 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
62 3.3 LOW
Local 		termius termius An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. New CWE-426
 Untrusted Search Path 		CVE-2024-55503 2025-01-18 07:51 2025-01-16 Show GitHub Exploit DB Packet Storm
63 3.3 LOW
Local 		phiewer phiewer In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data. New CWE-426
 Untrusted Search Path 		CVE-2024-53407 2025-01-18 07:51 2025-01-16 Show GitHub Exploit DB Packet Storm
64 6.5 MEDIUM
Network 		hirewebxperts passwords_manager The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping … New CWE-89
SQL Injection 		CVE-2024-12615 2025-01-18 07:17 2025-01-16 Show GitHub Exploit DB Packet Storm
65 4.3 MEDIUM
Network 		hirewebxperts passwords_manager The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versi… New CWE-862
 Missing Authorization 		CVE-2024-12614 2025-01-18 07:17 2025-01-16 Show GitHub Exploit DB Packet Storm
66 7.5 HIGH
Network 		hirewebxperts passwords_manager The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping… New CWE-89
SQL Injection 		CVE-2024-12613 2025-01-18 07:17 2025-01-16 Show GitHub Exploit DB Packet Storm
67 - - - KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions with `renderToString` could encounter malicious input usin… New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2025-23207 2025-01-18 07:15 2025-01-18 Show GitHub Exploit DB Packet Storm
68 6.3 MEDIUM
Network 		- - A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/edit_member.php. The manipulation o… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0541 2025-01-18 07:15 2025-01-18 Show GitHub Exploit DB Packet Storm
69 - - - OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitrarily. New - CVE-2024-57252 2025-01-18 07:15 2025-01-18 Show GitHub Exploit DB Packet Storm
70 - - - A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified. New - CVE-2023-50738 2025-01-18 07:15 2025-01-18 Show GitHub Exploit DB Packet Storm