Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
731 8.2 重要
Network 		Nextcloud Nextcloud Server Nextcloud の Nextcloud Server における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2024-52519 2025-01-24 11:31 2024-11-15 Show GitHub Exploit DB Packet Storm
732 5.5 警告
Local 		IObit Protected Folder IObit の Protected Folder における NULL ポインタデリファレンスに関する脆弱性 CWE-404
CWE-476
CWE-476
CVE-2025-0221 2025-01-24 11:31 2025-01-5 Show GitHub Exploit DB Packet Storm
733 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2239 2025-01-24 11:19 2024-03-13 Show GitHub Exploit DB Packet Storm
734 5.4 警告
Network 		bobbingwide oik bobbingwide の WordPress 用 oik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2256 2025-01-24 11:19 2024-03-14 Show GitHub Exploit DB Packet Storm
735 5.4 警告
Network 		Leap13 Premium Addons for Elementor Leap13 の WordPress 用 Premium Addons for Elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2399 2025-01-24 11:19 2024-03-15 Show GitHub Exploit DB Packet Storm
736 4.8 警告
Network 		doofinder doofinder WordPress 用 doofinder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25596 2025-01-24 11:19 2024-03-15 Show GitHub Exploit DB Packet Storm
737 8.8 重要
Network 		Moodle
Fedora Project		 Moodle
Fedora 		Moodle の Moodle 等複数ベンダの製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-352
CVE-2024-25982 2025-01-24 11:19 2024-02-19 Show GitHub Exploit DB Packet Storm
738 5.3 警告
Network 		PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア 		複数の PHOENIX CONTACT 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2024-25997 2025-01-24 11:19 2024-03-12 Show GitHub Exploit DB Packet Storm
739 7.5 重要
Network 		PHOENIX CONTACT charx sec-3150 ファームウェア
charx sec-3100 ファームウェア
charx sec-3000 ファームウェア
charx sec-3050 ファームウェア 		複数の PHOENIX CONTACT 製品における境界外読み取りに関する脆弱性 CWE-125
CWE-20
CVE-2024-26000 2025-01-24 11:19 2024-03-12 Show GitHub Exploit DB Packet Storm
740 4.9 警告
Network 		openautomationsoftware oas platform openautomationsoftware の oas platform における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2024-27201 2025-01-24 11:19 2024-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 - - - KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function. - CVE-2023-46401 2025-01-29 02:15 2025-01-24 Show GitHub Exploit DB Packet Storm
542 - - - Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily con… CWE-347
CWE-670
 Improper Verification of Cryptographic Signature
 Always-Incorrect Control Flow Implementation 		CVE-2025-24800 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
543 - - - In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local P… CWE-114
 Process Control 		CVE-2025-23385 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
544 - - - Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitrary files, including html and svg. Both can contain… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-23213 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
545 - - - Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storage feature allows any user to enumerate the name and content of files on the ser… CWE-200
Information Exposure 		CVE-2025-23212 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
546 - - - Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the … CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2025-23211 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
547 - - - Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with an account on an affected CVAT instance is able to run arbitrary code in… CWE-502
 Deserialization of Untrusted Data 		CVE-2025-23045 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
548 - - - A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possibl… - CVE-2025-0659 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
549 - - - EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-0432 2025-01-29 01:15 2025-01-29 Show GitHub Exploit DB Packet Storm
550 - - - The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scriptin… - CVE-2024-12807 2025-01-29 01:15 2025-01-28 Show GitHub Exploit DB Packet Storm