Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
701 9.8 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における古典的バッファオーバーフローの脆弱性 CWE-120
CWE-120
CVE-2023-6881 2025-01-24 11:55 2023-12-15 Show GitHub Exploit DB Packet Storm
702 3.1 低
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 CWE-76
CWE-Other
CVE-2024-1221 2025-01-24 11:54 2024-03-14 Show GitHub Exploit DB Packet Storm
703 6.5 警告
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
CWE-918
CVE-2024-1884 2025-01-24 11:54 2024-03-14 Show GitHub Exploit DB Packet Storm
704 5.5 警告
Local 		Zemana Anti-Logger Zemana の Anti-Logger におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2024-2180 2025-01-24 11:54 2024-03-15 Show GitHub Exploit DB Packet Storm
705 4.9 警告
Network 		openautomationsoftware oas platform openautomationsoftware の oas platform における脆弱性 CWE-73
CWE-Other
CVE-2024-21870 2025-01-24 11:54 2024-04-3 Show GitHub Exploit DB Packet Storm
706 5.5 警告
Local 		Zemana Anti-Logger Zemana の Anti-Logger における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-2204 2025-01-24 11:54 2024-03-15 Show GitHub Exploit DB Packet Storm
707 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2237 2025-01-24 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
708 5.4 警告
Network 		Paytium Paytium WordPress 用 Paytium におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25099 2025-01-24 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
709 5.4 警告
Network 		Esri ArcGIS Enterprise Esri の ArcGIS Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25708 2025-01-24 11:54 2024-04-4 Show GitHub Exploit DB Packet Storm
710 5.3 警告
Network 		Moodle
Fedora Project		 Moodle
Fedora 		Moodle の Moodle 等複数ベンダの製品における脆弱性 CWE-284
CWE-noinfo
CVE-2024-25980 2025-01-24 11:54 2024-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 3.7 LOW
Network 		- - A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP G… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-0730 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
662 - - - Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the get_discovery_results function of automation_devices.php using the network parameter… CWE-89
SQL Injection 		CVE-2024-54145 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
663 5.9 MEDIUM
Network 		- - IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithm… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-27256 2025-01-28 02:15 2025-01-28 Show GitHub Exploit DB Packet Storm
664 - - - Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the `Poller Standard Error Log Path` parameter in either Installation Step 5 or in Con… CWE-22
Path Traversal 		CVE-2024-45598 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
665 5.9 MEDIUM
Network 		- - IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. … CWE-311
Missing Encryption of Sensitive Data 		CVE-2024-38325 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
666 5.9 MEDIUM
Network 		- - IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that cou… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-38320 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
667 5.4 MEDIUM
Network 		- - IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intende… CWE-79
Cross-site Scripting 		CVE-2024-37527 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
668 4.3 MEDIUM
Network 		- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls. CWE-284
Improper Access Control 		CVE-2024-22316 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
669 6.4 MEDIUM
Network 		- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… CWE-79
Cross-site Scripting 		CVE-2023-52292 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm
670 4.3 MEDIUM
Network 		- - IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. CWE-204
 Response Discrepancy Information Exposure 		CVE-2023-47159 2025-01-28 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm