Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 29, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
881 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-26944 2025-01-21 11:21 2024-03-26 Show GitHub Exploit DB Packet Storm
882 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2023-52859 2025-01-21 11:19 2023-10-24 Show GitHub Exploit DB Packet Storm
883 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2021-47204 2025-01-21 11:17 2021-11-17 Show GitHub Exploit DB Packet Storm
884 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56600 2025-01-21 11:12 2024-10-15 Show GitHub Exploit DB Packet Storm
885 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-Other
その他 		CVE-2024-36959 2025-01-21 11:09 2024-04-16 Show GitHub Exploit DB Packet Storm
886 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11
Microsoft Windows 10
Microsoft Windows Server 2022 		Microsoft Windows SCSI クラス システム ファイルの特権の昇格の脆弱性 CWE-125
CWE-noinfo
CVE-2024-29994 2025-01-21 10:56 2024-05-14 Show GitHub Exploit DB Packet Storm
887 9.8 緊急
Network 		oretnom23 computer laboratory management system oretnom23 の computer laboratory management system における常に不適切な制御フローの実装に関する脆弱性 CWE-670
CWE-698
CVE-2024-3376 2025-01-21 10:53 2024-04-6 Show GitHub Exploit DB Packet Storm
888 8.8 重要
Network 		マイクロソフト Microsoft SQL Server
Microsoft ODBC Driver 		SQL Server 用 Microsoft ODBC ドライバーのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2024-28943 2025-01-21 10:53 2024-04-9 Show GitHub Exploit DB Packet Storm
889 8.8 重要
Network 		マイクロソフト Microsoft SQL Server SQL Server Native Client OLE DB プロバイダーのリモート コード実行に対する脆弱性 CWE-122
CWE-noinfo
CVE-2024-21333 2025-01-21 10:48 2024-07-9 Show GitHub Exploit DB Packet Storm
890 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2023-52777 2025-01-21 10:46 2023-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 29, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms allo… New CWE-79
Cross-site Scripting 		CVE-2025-24708 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
242 - - - Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in codection Import and export users and customers allows Retrieve Embedded Sensitive Data. This issue af… New CWE-538
 File and Directory Information Exposure 		CVE-2025-24689 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
243 - - - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WpMultiStoreLocator WP Multi Store Locator allows Reflected XSS. This issue affects WP Multi Store Locat… New CWE-80
Basic XSS 		CVE-2025-24680 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
244 - - - Deserialization of Untrusted Data vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Object Injection. This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 4.4.0. New CWE-502
 Deserialization of Untrusted Data 		CVE-2025-24671 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
245 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eniture Technology Small Package Quotes – Worldwide Express Edition allows SQL Injection. This is… New CWE-89
SQL Injection 		CVE-2025-24667 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
246 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eniture Technology Small Package Quotes – Unishippers Edition allows SQL Injection. This issue af… New CWE-89
SQL Injection 		CVE-2025-24665 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
247 - - - Missing Authorization vulnerability in NotFound LearnDash LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LearnDash LMS: from n/a through 4.20.0.1. New CWE-862
 Missing Authorization 		CVE-2025-24662 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
248 - - - Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhanc… New CWE-862
 Missing Authorization 		CVE-2025-24653 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
249 - - - Authentication Bypass by Spoofing vulnerability in BestWebSoft Google Captcha allows Identity Spoofing. This issue affects Google Captcha: from n/a through 1.78. New CWE-290
 Authentication Bypass by Spoofing 		CVE-2025-24628 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm
250 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Music Store allows Reflected XSS. This issue affects Music Store: from n/a through 1.1… New CWE-79
Cross-site Scripting 		CVE-2025-24626 2025-01-28 00:15 2025-01-28 Show GitHub Exploit DB Packet Storm