Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
641 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2024-57938 2025-01-24 15:08 2024-12-23 Show GitHub Exploit DB Packet Storm
642 4.9 警告
Network 		openautomationsoftware oas platform openautomationsoftware の oas platform における脆弱性 CWE-73
CWE-Other
CVE-2024-22178 2025-01-24 14:55 2024-04-3 Show GitHub Exploit DB Packet Storm
643 6.5 警告
Network 		Fortra GoAnywhere Managed File Transfer Fortra の GoAnywhere Managed File Transfer におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2024-25156 2025-01-24 14:48 2024-03-14 Show GitHub Exploit DB Packet Storm
644 6.1 警告
Network 		Etoile Web Design Ultimate Reviews Etoile Web Design の WordPress 用 Ultimate Reviews におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25597 2025-01-24 14:48 2024-03-15 Show GitHub Exploit DB Packet Storm
645 5.3 警告
Network 		Moodle
Fedora Project		 Moodle
Fedora 		Moodle の Moodle 等複数ベンダの製品におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
CWE-639
CVE-2024-25983 2025-01-24 14:47 2024-02-19 Show GitHub Exploit DB Packet Storm
646 9.8 緊急
Network 		PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア 		複数の PHOENIX CONTACT 製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2024-25995 2025-01-24 14:47 2024-03-12 Show GitHub Exploit DB Packet Storm
647 7.3 重要
Network 		PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア 		複数の PHOENIX CONTACT 製品におけるコマンドインジェクションの脆弱性 CWE-20
CWE-77
CVE-2024-25998 2025-01-24 14:47 2024-03-12 Show GitHub Exploit DB Packet Storm
648 9.8 緊急
Network 		PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア 		複数の PHOENIX CONTACT 製品における境界外書き込みに関する脆弱性 CWE-20
CWE-787
CVE-2024-26001 2025-01-24 14:47 2024-03-12 Show GitHub Exploit DB Packet Storm
649 5.3 警告
Network 		Open Knowledge Foundation CKAN Open Knowledge Foundation の CKAN におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
CWE-532
CVE-2024-27097 2025-01-24 14:47 2024-03-13 Show GitHub Exploit DB Packet Storm
650 7.8 重要
Local 		PHOENIX CONTACT charx sec-3000 ファームウェア
charx sec-3150 ファームウェア
charx sec-3050 ファームウェア
charx sec-3100 ファームウェア 		複数の PHOENIX CONTACT 製品における信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2024-28133 2025-01-24 14:47 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 3.7 LOW
Network 		- - A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP G… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-0730 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
662 - - - Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the get_discovery_results function of automation_devices.php using the network parameter… CWE-89
SQL Injection 		CVE-2024-54145 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
663 5.9 MEDIUM
Network 		- - IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithm… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-27256 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
664 - - - Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the `Poller Standard Error Log Path` parameter in either Installation Step 5 or in Con… CWE-22
Path Traversal 		CVE-2024-45598 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
665 5.9 MEDIUM
Network 		- - IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. … CWE-311
Missing Encryption of Sensitive Data 		CVE-2024-38325 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
666 5.9 MEDIUM
Network 		- - IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that cou… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-38320 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
667 5.4 MEDIUM
Network 		- - IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intende… CWE-79
Cross-site Scripting 		CVE-2024-37527 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
668 4.3 MEDIUM
Network 		- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls. CWE-284
Improper Access Control 		CVE-2024-22316 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
669 6.4 MEDIUM
Network 		- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… CWE-79
Cross-site Scripting 		CVE-2023-52292 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
670 4.3 MEDIUM
Network 		- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. CWE-204
 Response Discrepancy Information Exposure 		CVE-2023-47159 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm