Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 25, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
81 9.8 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における不正な型変換に関する脆弱性 New CWE-704
CWE-704
CVE-2023-6249 2025-01-24 11:55 2023-11-21 Show GitHub Exploit DB Packet Storm
82 9.8 緊急
Network 		Zephyr Project Zephyr Zephyr Project の Zephyr における古典的バッファオーバーフローの脆弱性 New CWE-120
CWE-120
CVE-2023-6881 2025-01-24 11:55 2023-12-15 Show GitHub Exploit DB Packet Storm
83 3.1 低
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG における脆弱性 New CWE-76
CWE-Other
CVE-2024-1221 2025-01-24 11:54 2024-03-14 Show GitHub Exploit DB Packet Storm
84 6.5 警告
Network 		PaperCut Software International Pty PaperCut MF
PaperCut NG 		PaperCut Software International Pty の PaperCut MF および PaperCut NG におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
CWE-918
CVE-2024-1884 2025-01-24 11:54 2024-03-14 Show GitHub Exploit DB Packet Storm
85 5.5 警告
Local 		Zemana Anti-Logger Zemana の Anti-Logger におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 New CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2024-2180 2025-01-24 11:54 2024-03-15 Show GitHub Exploit DB Packet Storm
86 4.9 警告
Network 		openautomationsoftware oas platform openautomationsoftware の oas platform における脆弱性 New CWE-73
CWE-Other
CVE-2024-21870 2025-01-24 11:54 2024-04-3 Show GitHub Exploit DB Packet Storm
87 5.5 警告
Local 		Zemana Anti-Logger Zemana の Anti-Logger における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2024-2204 2025-01-24 11:54 2024-03-15 Show GitHub Exploit DB Packet Storm
88 5.4 警告
Network 		Leap13 premium addons Leap13 の WordPress 用 premium addons におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2237 2025-01-24 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
89 5.4 警告
Network 		Paytium Paytium WordPress 用 Paytium におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25099 2025-01-24 11:54 2024-03-13 Show GitHub Exploit DB Packet Storm
90 5.4 警告
Network 		Esri ArcGIS Enterprise Esri の ArcGIS Enterprise におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-25708 2025-01-24 11:54 2024-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 - - - Cross-Site Request Forgery (CSRF) vulnerability in Laymance Technologies LLC MachForm Shortcode allows Stored XSS. This issue affects MachForm Shortcode: from n/a through 1.4.1. New CWE-352
 Origin Validation Error 		CVE-2025-24636 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
172 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Orbisius Simple Notice allows Stored XSS. This issue affects Orbisius S… New CWE-79
Cross-site Scripting 		CVE-2025-24634 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
173 - - - Missing Authorization vulnerability in silverplugins217 Build Private Store For Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Build Private S… New CWE-862
 Missing Authorization 		CVE-2025-24633 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
174 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Linnea Huxford, LinSoftware Blur Text allows Stored XSS. This issue affects Blur Text: from n/a t… New CWE-79
Cross-site Scripting 		CVE-2025-24627 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
175 - - - Missing Authorization vulnerability in Marco Almeida | Webdados Taxonomy/Term and Role based Discounts for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This is… New CWE-862
 Missing Authorization 		CVE-2025-24625 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
176 - - - Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Security Really Simple SSL allows Cross Site Request Forgery. This issue affects Really Simple SSL: from n/a through 9.1.4. New CWE-352
 Origin Validation Error 		CVE-2025-24623 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
177 - - - Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Job Board Manager allows Cross Site Request Forgery. This issue affects Job Board Manager: from n/a through 2.1.59. New CWE-352
 Origin Validation Error 		CVE-2025-24622 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
178 - - - Missing Authorization vulnerability in ElementInvader ElementInvader Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ElementInvader Ad… New CWE-862
 Missing Authorization 		CVE-2025-24618 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
179 - - - Missing Authorization vulnerability in Foliovision FV Thoughtful Comments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FV Thoughtful Comments: from n/a … New CWE-862
 Missing Authorization 		CVE-2025-24613 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm
180 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Smackcoders WP Ultimate Exporter allows Absolute Path Traversal. This issue affects WP Ultimate Exporte… New CWE-22
Path Traversal 		CVE-2025-24611 2025-01-25 03:15 2025-01-25 Show GitHub Exploit DB Packet Storm