Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
751 9.8 緊急
Network 		ZyXEL NAS 326 ファームウェア
NAS 542 ファームウェア 		ZyXEL の NAS 326 ファームウェアおよび NAS 542 ファームウェアにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-29973 2025-01-24 11:16 2024-06-4 Show GitHub Exploit DB Packet Storm
752 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2000 2025-01-24 11:00 2024-03-13 Show GitHub Exploit DB Packet Storm
753 4.3 警告
Network 		WP Ninjas, LLC. Ninja Forms Saturday Drive の WordPress 用 Ninja Forms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2113 2025-01-24 11:00 2024-03-29 Show GitHub Exploit DB Packet Storm
754 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2238 2025-01-24 11:00 2024-03-13 Show GitHub Exploit DB Packet Storm
755 4.9 警告
Network 		openautomationsoftware oas platform openautomationsoftware の oas platform における脆弱性 CWE-130
CWE-Other
CVE-2024-24976 2025-01-24 11:00 2024-04-3 Show GitHub Exploit DB Packet Storm
756 4.8 警告
Network 		wpmaspik maspik wpmaspik の WordPress 用 maspik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25101 2025-01-24 11:00 2024-03-13 Show GitHub Exploit DB Packet Storm
757 5.4 警告
Network 		Esri Portal for ArcGIS Esri の Portal for ArcGIS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25709 2025-01-24 11:00 2024-04-4 Show GitHub Exploit DB Packet Storm
758 5.4 警告
Network 		Themeisle otter blocks ThemeIsle の WordPress 用 otter blocks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1684 2025-01-24 10:59 2024-03-13 Show GitHub Exploit DB Packet Storm
759 9.1 緊急
Network 		デル smartfabric os10 デルの smartfabric os10 における脆弱性 CWE-923
CWE-noinfo
CVE-2023-28078 2025-01-24 10:44 2023-03-10 Show GitHub Exploit DB Packet Storm
760 9.8 緊急
Network 		デル Dell Enterprise SONiC Distribution デルの Dell Enterprise SONiC Distribution における脆弱性 CWE-20
CWE-noinfo
CVE-2023-32484 2025-01-24 10:44 2023-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 - - - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerabilit… CWE-653
 Improper Isolation or Compartmentalization 		CVE-2024-0137 2025-01-28 12:15 2025-01-28 Show GitHub Exploit DB Packet Storm
622 - - - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vuln… CWE-653
 Improper Isolation or Compartmentalization 		CVE-2024-0136 2025-01-28 12:15 2025-01-28 Show GitHub Exploit DB Packet Storm
623 - - - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability… CWE-653
 Improper Isolation or Compartmentalization 		CVE-2024-0135 2025-01-28 12:15 2025-01-28 Show GitHub Exploit DB Packet Storm
624 4.0 MEDIUM
Local 		- - IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connecti… CWE-923
 Improper Restriction of Communication Channel to Intended Endpoints 		CVE-2024-22315 2025-01-28 11:15 2025-01-28 Show GitHub Exploit DB Packet Storm
625 5.3 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniq… CWE-300
 Channel Accessible by Non-Endpoint 		CVE-2024-27263 2025-01-28 10:15 2025-01-28 Show GitHub Exploit DB Packet Storm
626 - - - Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unres… - CVE-2024-12649 2025-01-28 10:15 2025-01-28 Show GitHub Exploit DB Packet Storm
627 - - - Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being … - CVE-2024-12648 2025-01-28 10:15 2025-01-28 Show GitHub Exploit DB Packet Storm
628 - - - Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being … - CVE-2024-12647 2025-01-28 10:15 2025-01-28 Show GitHub Exploit DB Packet Storm
629 6.3 MEDIUM
Network 		- - IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the at… CWE-89
SQL Injection 		CVE-2023-50316 2025-01-28 10:15 2025-01-28 Show GitHub Exploit DB Packet Storm
630 6.5 MEDIUM
Adjacent 		- - IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-28786 2025-01-28 09:15 2025-01-28 Show GitHub Exploit DB Packet Storm