Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
791 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-57872 2025-01-17 21:35 2024-11-20 Show GitHub Exploit DB Packet Storm
792 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-56618 2025-01-17 21:33 2024-12-2 Show GitHub Exploit DB Packet Storm
793 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2024-56596 2025-01-17 21:32 2024-10-29 Show GitHub Exploit DB Packet Storm
794 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2024-53203 2025-01-17 21:30 2024-11-12 Show GitHub Exploit DB Packet Storm
795 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2024-53187 2025-01-17 21:28 2024-11-26 Show GitHub Exploit DB Packet Storm
796 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2024-35981 2025-01-17 21:26 2024-04-7 Show GitHub Exploit DB Packet Storm
797 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2023-52532 2025-01-17 21:25 2023-10-5 Show GitHub Exploit DB Packet Storm
798 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2021-47086 2025-01-17 21:23 2021-12-20 Show GitHub Exploit DB Packet Storm
799 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2023-52789 2025-01-17 21:19 2023-09-18 Show GitHub Exploit DB Packet Storm
800 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56640 2025-01-17 21:03 2024-12-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 7.5 HIGH
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerabi… Update - CVE-2025-21511 2025-01-24 07:15 2025-01-22 Show GitHub Exploit DB Packet Storm
302 - - - Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was releas… New - CVE-2025-23012 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
303 - - - Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JS… New - CVE-2025-23011 2025-01-24 06:15 2025-01-24 Show GitHub Exploit DB Packet Storm
304 - - - Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter. Update - CVE-2024-57370 2025-01-24 06:15 2025-01-18 Show GitHub Exploit DB Packet Storm
305 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… Update - CVE-2025-21491 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
306 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vul… Update - CVE-2025-21490 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
307 6.1 MEDIUM
Network 		- - Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vu… Update - CVE-2025-21489 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
308 5.4 MEDIUM
Network 		- - Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable … Update - CVE-2024-21245 2025-01-24 05:15 2025-01-22 Show GitHub Exploit DB Packet Storm
309 7.8 HIGH
Local 		google android In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv… Update CWE-787
 Out-of-bounds Write 		CVE-2018-9389 2025-01-24 04:56 2025-01-18 Show GitHub Exploit DB Packet Storm
310 5.5 MEDIUM
Local 		google android In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… Update CWE-862
 Missing Authorization 		CVE-2018-9406 2025-01-24 04:55 2025-01-18 Show GitHub Exploit DB Packet Storm