Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
621 7.5 重要
Network 		クアルコム AR8035 ファームウェア
qcn6224 ファームウェア
fastconnect 6900 ファームウェア
qcs4490 ファームウェア
QCA6584AU ファームウェア
qep8111 ファームウェア
qcn6024 ファームウェア
QCA6174A ファ… 		複数のクアルコム製品における脆弱性 CWE-20
CWE-noinfo
CVE-2023-33103 2025-01-14 18:49 2023-05-17 Show GitHub Exploit DB Packet Storm
622 7.5 重要
Network 		クアルコム ipq5302 ファームウェア
AR8035 ファームウェア
fastconnect 6800 ファームウェア
IPQ6000 ファームウェア
fastconnect 6900 ファームウェア
IPQ6028 ファームウェア
CSR8811 ファームウェア
IPQ6… 		複数のクアルコム製品における境界外読み取りに関する脆弱性 CWE-125
CWE-126
CVE-2023-43539 2025-01-14 18:49 2023-09-19 Show GitHub Exploit DB Packet Storm
623 9.8 緊急
Network 		クアルコム QAM8295P ファームウェア
fastconnect 6800 ファームウェア
fastconnect 6900 ファームウェア
AQT1000 ファームウェア
QCA6430 ファームウェア
fastconnect 6200 ファームウェア
qamsrv1h&nbs… 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-120
CWE-787
CVE-2023-43548 2025-01-14 18:49 2023-09-19 Show GitHub Exploit DB Packet Storm
624 7.8 重要
Local 		クアルコム ipq5302 ファームウェア
AR8035 ファームウェア
fastconnect 6800 ファームウェア
IPQ6000 ファームウェア
fastconnect 6900 ファームウェア
CSR8811 ファームウェア
IPQ6010 ファームウェア
imme… 		複数のクアルコム製品における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2023-43549 2025-01-14 18:49 2023-09-19 Show GitHub Exploit DB Packet Storm
625 6.5 警告
Network 		mintplexlabs anythingllm mintplexlabs の anythingllm における相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2024-0550 2025-01-14 18:49 2024-02-28 Show GitHub Exploit DB Packet Storm
626 9.8 緊急
Network 		1000projects attendance tracking management system 1000projects の attendance tracking management system における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2024-12787 2025-01-14 18:49 2024-12-19 Show GitHub Exploit DB Packet Storm
627 9.8 緊急
Network 		codezips technical discussion forum codezips の technical discussion forum における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2024-12788 2025-01-14 18:49 2024-12-19 Show GitHub Exploit DB Packet Storm
628 4.8 警告
Network 		emlog emlog emlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CWE-94
CVE-2024-12846 2025-01-14 18:49 2024-12-21 Show GitHub Exploit DB Packet Storm
629 9.8 緊急
Network 		codezips e-commerce site codezips の e-commerce site における SQL インジェクションの脆弱性 CWE-74
CWE-89
CWE-89
CVE-2024-12884 2025-01-14 18:49 2024-12-21 Show GitHub Exploit DB Packet Storm
630 5.4 警告
Network 		osuuu lightpicture osuuu の lightpicture におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CWE-94
CVE-2024-13141 2025-01-14 18:49 2025-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 - - - In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege with no additional execution privileges nee… New - CVE-2018-9434 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
122 - - - In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execution privileges needed. User interaction … New - CVE-2018-9384 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
123 - - - In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. U… New - CVE-2018-9383 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
124 - - - In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. This could lead to local escalation of pri… New - CVE-2018-9382 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
125 - - - In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to local information disclosure with no additio… New - CVE-2018-9379 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
126 - - - In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege… New - CVE-2018-9375 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
127 - - - In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service w… New - CVE-2017-13322 2025-01-18 08:15 2025-01-18 Show GitHub Exploit DB Packet Storm
128 3.3 LOW
Local 		termius termius An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. New CWE-426
 Untrusted Search Path 		CVE-2024-55503 2025-01-18 07:51 2025-01-16 Show GitHub Exploit DB Packet Storm
129 3.3 LOW
Local 		phiewer phiewer In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data. New CWE-426
 Untrusted Search Path 		CVE-2024-53407 2025-01-18 07:51 2025-01-16 Show GitHub Exploit DB Packet Storm
130 6.5 MEDIUM
Network 		hirewebxperts passwords_manager The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping … New CWE-89
SQL Injection 		CVE-2024-12615 2025-01-18 07:17 2025-01-16 Show GitHub Exploit DB Packet Storm