Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
841 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53171 2025-01-17 09:44 2024-11-14 Show GitHub Exploit DB Packet Storm
842 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56604 2025-01-17 09:44 2024-10-15 Show GitHub Exploit DB Packet Storm
843 4.3 警告
Network 		IBM IBM InfoSphere Information Server IBM の IBM InfoSphere Information Server におけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2024-51460 2025-01-17 08:52 2024-12-5 Show GitHub Exploit DB Packet Storm
844 6.8 警告
Physics 		Huawei Yale-AL50A ファームウェア
Princeton-AL10D ファームウェア
P30 Pro ファームウェア
Yale-AL00A ファームウェア
Mate 20 ファームウェア
P30 ファームウェア
YaleP-AL10B ファームウェア 		複数の Huawei 製品における不正な認証に関する脆弱性 CWE-285
CWE-863
CVE-2020-9081 2025-01-16 18:13 2020-02-18 Show GitHub Exploit DB Packet Storm
845 7.5 重要
Network 		マイクロソフト Microsoft Copilot Studio Copilot Studio の情報漏えいの脆弱性 CWE-200
CWE-noinfo
CVE-2024-43610 2025-01-16 18:08 2024-10-8 Show GitHub Exploit DB Packet Storm
846 7.5 重要
Adjacent 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Window… 		Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-20
CWE-829
CWE-noinfo
CVE-2024-30092 2025-01-16 18:05 2024-10-8 Show GitHub Exploit DB Packet Storm
847 4.1 警告
Physics 		マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Window… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-284
CWE-noinfo
CVE-2024-28922 2025-01-16 18:05 2024-04-9 Show GitHub Exploit DB Packet Storm
848 8.8 重要
Local 		マイクロソフト Xbox Gaming Services XBox ゲーム サービスの特権昇格の脆弱性 CWE-59
CWE-noinfo
CVE-2024-28916 2025-01-16 18:02 2024-03-22 Show GitHub Exploit DB Packet Storm
849 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-56786 2025-01-16 18:00 2024-11-1 Show GitHub Exploit DB Packet Storm
850 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-56771 2025-01-16 17:58 2024-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 5.4 MEDIUM
Network 		- - Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and… New - CVE-2025-21544 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
172 7.8 HIGH
Local 		- - Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). Supported versions that are affected are Prior to 8.1.0. Easily exploitable vulnerability allows low p… New - CVE-2025-21532 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
173 4.3 MEDIUM
Network 		- - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerab… New - CVE-2025-21530 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
174 4.9 MEDIUM
Network 		- - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Ea… New - CVE-2025-21529 2025-01-23 03:15 2025-01-22 Show GitHub Exploit DB Packet Storm
175 - - - An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enum… New - CVE-2025-24397 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
176 - - - Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2025-23028 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
177 7.5 HIGH
Network 		- - A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (… New CWE-789
CWE-476
 Memory Allocation with Excessive Size Value
 NULL Pointer Dereference 		CVE-2025-20165 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
178 9.9 CRITICAL
Network 		- - A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vuln… New CWE-274
CWE-276
 Improper Handling of Insufficient Privileges
Incorrect Default Permissions  		CVE-2025-20156 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
179 4.4 MEDIUM
Network 		- - IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitr… New CWE-79
Cross-site Scripting 		CVE-2024-51457 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm
180 5.3 MEDIUM
Network 		- - A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected d… New CWE-122
CWE-120
Heap-based Buffer Overflow
Classic Buffer Overflow 		CVE-2025-20128 2025-01-23 02:15 2025-01-23 Show GitHub Exploit DB Packet Storm