Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
671 9.1 緊急
Network 		paddlepaddle paddlepaddle paddlepaddle におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-0818 2025-01-24 14:22 2024-03-7 Show GitHub Exploit DB Packet Storm
672 7.5 重要
Network 		Softing Industrial Automation GmbH edgeConnector
edgeaggregator 		Softing Industrial Automation GmbH の edgeaggregator および edgeConnector における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2024-0860 2025-01-24 14:22 2024-03-14 Show GitHub Exploit DB Packet Storm
673 4.8 警告
Network 		PaperCut Software International Pty PaperCut NG
PaperCut MF 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 CWE-488
CWE-Other
CVE-2024-1223 2025-01-24 14:22 2024-03-14 Show GitHub Exploit DB Packet Storm
674 4.3 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements における脆弱性 CWE-359
CWE-Other
CVE-2024-13215 2025-01-24 14:22 2025-01-15 Show GitHub Exploit DB Packet Storm
675 6.5 警告
Network 		GitHub Enterprise Server GitHub の Enterprise Server における不正な認証に関する脆弱性 CWE-863
CWE-863
CVE-2024-1482 2025-01-24 14:22 2024-02-14 Show GitHub Exploit DB Packet Storm
676 8.8 重要
Network 		PluginUs.Net HUSKY - Products Filter for WooCommerce Professional PluginUs.Net の WordPress 用 HUSKY - Products Filter for WooCommerce Professional における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-1795 2025-01-24 14:22 2024-03-15 Show GitHub Exploit DB Packet Storm
677 6.1 警告
Network 		weLaunch WordPress GDPR weLaunch の WordPress 用 WordPress GDPR におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10388 2025-01-24 14:22 2024-11-19 Show GitHub Exploit DB Packet Storm
678 6.5 警告
Network 		Comarch SA Comarch ERP XL Comarch SA の Comarch ERP XL における認証情報の不十分な保護に関する脆弱性 CWE-522
CWE-522
CVE-2023-4538 2025-01-24 14:22 2023-08-25 Show GitHub Exploit DB Packet Storm
679 9.1 緊急
Network 		weLaunch WordPress GDPR weLaunch の WordPress 用 WordPress GDPR における認証の欠如に関する脆弱性 CWE-862
CWE-862
CVE-2024-11069 2025-01-24 14:17 2024-11-19 Show GitHub Exploit DB Packet Storm
680 7.8 重要
Local 		Google Android Google の Android における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-9389 2025-01-24 14:04 2018-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
521 - - - Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could resu… - CVE-2024-12248 2025-02-1 02:15 2025-01-31 Show GitHub Exploit DB Packet Storm
522 5.4 MEDIUM
Network 		vinayjain embed_swagger_ui The Embed Swagger UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsgui' shortcode in all versions up to, and including, 1.0.0 due to insufficient input saniti… CWE-79
Cross-site Scripting 		CVE-2024-13700 2025-02-1 01:49 2025-01-30 Show GitHub Exploit DB Packet Storm
523 - - - PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not… CWE-200
CWE-540
Information Exposure
 Inclusion of Sensitive Information in Source Code 		CVE-2025-23215 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
524 6.4 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed a… CWE-79
Cross-site Scripting 		CVE-2024-49807 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
525 5.4 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitr… CWE-79
Cross-site Scripting 		CVE-2024-47116 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
526 4.8 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary … CWE-79
Cross-site Scripting 		CVE-2024-47103 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
527 4.3 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an obse… CWE-203
 Information Exposure Through Discrepancy 		CVE-2024-45089 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
528 4.8 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary … CWE-79
Cross-site Scripting 		CVE-2024-40696 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
529 - - - Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixe… - CVE-2024-11741 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm
530 4.3 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… CWE-352
 Origin Validation Error 		CVE-2023-38739 2025-02-1 01:15 2025-02-1 Show GitHub Exploit DB Packet Storm