Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 9, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
61 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 New CWE-Other
その他 		CVE-2021-47125 2025-01-9 14:45 2021-06-4 Show GitHub Exploit DB Packet Storm
62 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2021-47442 2025-01-9 14:45 2021-10-13 Show GitHub Exploit DB Packet Storm
63 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-35891 2025-01-9 14:42 2024-04-1 Show GitHub Exploit DB Packet Storm
64 9.8 緊急
Network 		ABB aspect-ent-2 ファームウェア
nexus-2128 ファームウェア
matrix-296 ファームウェア
nexus-264-f ファームウェア
matrix-11 ファームウェア
aspect-ent-12 ファームウェア
matrix-232 ファームウェア
nexus… 		複数の ABB 製品における脆弱性 Update CWE-noinfo
情報不足 		CVE-2024-6298 2025-01-9 14:42 2024-07-5 Show GitHub Exploit DB Packet Storm
65 7.5 重要
Network 		ABB aspect-ent-2 ファームウェア
nexus-2128 ファームウェア
matrix-296 ファームウェア
nexus-264-f ファームウェア
matrix-11 ファームウェア
aspect-ent-12 ファームウェア
matrix-232 ファームウェア
nexus… 		複数の ABB 製品における外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 Update CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2024-6209 2025-01-9 14:40 2024-07-5 Show GitHub Exploit DB Packet Storm
66 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2024-35866 2025-01-9 14:38 2024-04-3 Show GitHub Exploit DB Packet Storm
67 8.8 重要
Network 		Xerox freeflow core Xerox の freeflow core におけるパストラバーサルの脆弱性 Update CWE-22
CWE-22
CVE-2024-47558 2025-01-9 14:38 2024-10-7 Show GitHub Exploit DB Packet Storm
68 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2024-35864 2025-01-9 14:37 2024-04-3 Show GitHub Exploit DB Packet Storm
69 9.8 緊急
Network 		Xerox freeflow core Xerox の freeflow core におけるパストラバーサルの脆弱性 Update CWE-22
CWE-22
CVE-2024-47557 2025-01-9 14:37 2024-10-7 Show GitHub Exploit DB Packet Storm
70 9.8 緊急
Network 		Xerox freeflow core Xerox の freeflow core におけるパストラバーサルの脆弱性 Update CWE-22
CWE-22
CVE-2024-47556 2025-01-9 14:36 2024-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could … New - CVE-2024-12714 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
62 - - - The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old… New - CVE-2024-10815 2025-01-10 01:15 2025-01-9 Show GitHub Exploit DB Packet Storm
63 - - - An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload. New - CVE-2024-46603 2025-01-10 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
64 - - - An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a cra… New - CVE-2024-46602 2025-01-10 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
65 - - - Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow. New - CVE-2024-46601 2025-01-10 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
66 5.5 MEDIUM
Local 		dell powerscale_onefs Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerab… New CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2024-47475 2025-01-10 01:04 2025-01-7 Show GitHub Exploit DB Packet Storm
67 - - - A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer. New - CVE-2024-10106 2025-01-10 00:15 2025-01-10 Show GitHub Exploit DB Packet Storm
68 - - - IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privileged users. New CWE-282
CWE-276
 Improper Ownership Management
Incorrect Default Permissions  		CVE-2024-43176 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
69 - - - IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red H… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2022-22491 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm
70 - - - The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to Cross-Site Request Fo… New - CVE-2024-12605 2025-01-10 00:15 2025-01-9 Show GitHub Exploit DB Packet Storm