Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 20, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
681 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. fh1203 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の fh1203 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-2988 2025-01-16 11:16 2024-03-27 Show GitHub Exploit DB Packet Storm
682 8.8 重要
Network 		DesDev Inc. DedeCMS DesDev Inc. の DedeCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3148 2025-01-16 11:16 2024-04-2 Show GitHub Exploit DB Packet Storm
683 7.8 重要
Local 		Rockwell Automation Arena Rockwell Automation の Arena における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-12175 2025-01-16 10:40 2024-12-19 Show GitHub Exploit DB Packet Storm
684 5.4 警告
Network 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows 10
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Window… 		Windows Mark Of The Web セキュリティ機能のバイパスの脆弱性 CWE-693
CWE-noinfo
CVE-2024-30050 2025-01-15 18:15 2024-05-14 Show GitHub Exploit DB Packet Storm
685 4.1 警告
Network 		マイクロソフト Microsoft Dynamics 365 Customer Insights Dynamics 365 Customer Insights のなりすましの脆弱性 CWE-79
CWE-79
CVE-2024-30048 2025-01-15 18:03 2024-05-14 Show GitHub Exploit DB Packet Storm
686 5.5 警告
Local 		マイクロソフト Azure Identity Library .NET 用 Azure Identity ライブラリの情報漏えいの脆弱性 CWE-522
CWE-noinfo
CVE-2024-29992 2025-01-15 17:54 2024-04-9 Show GitHub Exploit DB Packet Storm
687 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel におけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2024-26873 2025-01-15 17:49 2024-01-24 Show GitHub Exploit DB Packet Storm
688 7.8 重要
Local 		Linux
Debian		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2023-52691 2025-01-15 17:47 2023-12-14 Show GitHub Exploit DB Packet Storm
689 7.8 重要
Local 		Linux
Debian		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2023-52679 2025-01-15 17:44 2023-12-29 Show GitHub Exploit DB Packet Storm
690 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso… 		Windows Telephony Server の特権の昇格の脆弱性 CWE-416
CWE-noinfo
CVE-2024-26230 2025-01-15 17:41 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 - - - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file.c:828 CPU: 10 PID… New - CVE-2025-21634 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
52 - - - In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: zero sqd->thread on tctx errors Syzkeller reports: BUG: KASAN: slab-use-after-free in thread_group_cputime+0x40… New - CVE-2025-21633 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
53 - - - In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has its own set of registers. Thos… New - CVE-2025-21632 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
54 - - - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-… New - CVE-2025-21631 2025-01-19 20:15 2025-01-19 Show GitHub Exploit DB Packet Storm
55 4.5 MEDIUM
Local 		- - A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulatio… New CWE-426
 Untrusted Search Path 		CVE-2025-0567 2025-01-19 17:15 2025-01-19 Show GitHub Exploit DB Packet Storm
56 8.8 HIGH
Network 		- - A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac le… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2025-0566 2025-01-19 16:15 2025-01-19 Show GitHub Exploit DB Packet Storm
57 7.3 HIGH
Network 		- - A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id leads to sql i… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0565 2025-01-19 15:15 2025-01-19 Show GitHub Exploit DB Packet Storm
58 5.5 MEDIUM
Network 		- - The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient … New CWE-79
Cross-site Scripting 		CVE-2024-8722 2025-01-19 14:15 2025-01-19 Show GitHub Exploit DB Packet Storm
59 7.3 HIGH
Network 		- - A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /authenticate.php. The manipul… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-0564 2025-01-19 13:15 2025-01-19 Show GitHub Exploit DB Packet Storm
60 4.3 MEDIUM
Network 		- - IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on untrusted inputs. New CWE-807
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2024-45654 2025-01-19 12:15 2025-01-19 Show GitHub Exploit DB Packet Storm