Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
711 7.8 重要
Local 		PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア 		複数の PHOENIX CONTACT 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2024-25999 2025-01-24 11:54 2024-03-12 Show GitHub Exploit DB Packet Storm
712 7.5 重要
Network 		PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア 		複数の PHOENIX CONTACT 製品における初期化されていないポインタのアクセスに関する脆弱性 CWE-824
初期化されていないポインタのアクセス 		CVE-2024-26004 2025-01-24 11:54 2024-03-12 Show GitHub Exploit DB Packet Storm
713 8.5 重要
Network 		Pterodactyl Wings Pterodactyl の Wings におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CWE-362
CWE-362
CWE-363
CVE-2024-27102 2025-01-24 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
714 7 重要
Network 		PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア 		複数の PHOENIX CONTACT 製品における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2024-28134 2025-01-24 11:54 2024-05-14 Show GitHub Exploit DB Packet Storm
715 7.8 重要
Local 		PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア 		複数の PHOENIX CONTACT 製品における Time-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2024-28137 2025-01-24 11:54 2024-05-14 Show GitHub Exploit DB Packet Storm
716 5.4 警告
Network 		themelooks enter addons themelooks の WordPress 用 enter addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-47625 2025-01-24 11:54 2024-10-5 Show GitHub Exploit DB Packet Storm
717 7.2 重要
Network 		GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORG の GLPI における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2024-47761 2025-01-24 11:54 2024-12-11 Show GitHub Exploit DB Packet Storm
718 9.8 緊急
Network 		Aviatrix Controller Aviatrix の Controller における OS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2024-50603 2025-01-24 11:54 2024-10-27 Show GitHub Exploit DB Packet Storm
719 9.8 緊急
Network 		ZyXEL NAS 326 ファームウェア
NAS 542 ファームウェア 		ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-6342 2025-01-24 11:54 2024-09-10 Show GitHub Exploit DB Packet Storm
720 7.8 重要
Local 		インテル graphics performance analyzers インテルの graphics performance analyzers における制御されていない検索パスの要素に関する脆弱性 CWE-427
CWE-427
CVE-2023-41961 2025-01-24 11:54 2023-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
641 - - - Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature comp… - CVE-2024-13176 2025-01-28 06:15 2025-01-20 Show GitHub Exploit DB Packet Storm
642 6.3 MEDIUM
Network 		- - A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based… CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow 		CVE-2025-0751 2025-01-28 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
643 - - - Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older. CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2024-48841 2025-01-28 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
644 4.7 MEDIUM
Network 		- - A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the function getBeanName of the component Whitelist. The manipulation leads to des… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2025-0734 2025-01-28 04:15 2025-01-28 Show GitHub Exploit DB Packet Storm
645 - - - Cacti is an open source performance and fault management framework. Some of the data stored in automation_tree_rules.php is not thoroughly checked and is used to concatenate the SQL statement in buil… - CVE-2025-24368 2025-01-28 04:15 2025-01-28 Show GitHub Exploit DB Packet Storm
646 - - - Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web ro… - CVE-2025-24367 2025-01-28 04:15 2025-01-28 Show GitHub Exploit DB Packet Storm
647 9.8 CRITICAL
Network 		sonicwall sma8200v
sma6200_firmware
sma6210_firmware
sma7200_firmware
sma7210_firmware
sra_ex6000_firmware
sra_ex7000_firmware
sra_ex9000_firmware 		Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific condit… - CVE-2025-23006 2025-01-28 03:41 2025-01-23 Show GitHub Exploit DB Packet Storm
648 - - - vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim o… CWE-284
Improper Access Control 		CVE-2025-24365 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
649 - - - vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code … CWE-74
Injection 		CVE-2025-24364 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
650 - - - vLLM is a library for LLM inference and serving. vllm/model_executor/weight_utils.py implements hf_model_weights_iterator to load the model checkpoint, which is downloaded from huggingface. It uses t… CWE-502
 Deserialization of Untrusted Data 		CVE-2025-24357 2025-01-28 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm