Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
911 8.8 重要
Network 		XWiki xwiki XWiki の xwiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-352
CWE-95
CVE-2024-31986 2025-01-22 16:42 2024-04-10 Show GitHub Exploit DB Packet Storm
912 8.8 重要
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-32794 2025-01-22 16:42 2024-04-24 Show GitHub Exploit DB Packet Storm
913 5.3 警告
Network 		PrestaShop PrestaShop PrestaShop における脆弱性 CWE-200
CWE-noinfo
CVE-2024-34717 2025-01-22 16:42 2024-05-14 Show GitHub Exploit DB Packet Storm
914 9.8 緊急
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager における認証に関する脆弱性 CWE-287
CWE-287
CVE-2024-3487 2025-01-22 16:42 2024-05-15 Show GitHub Exploit DB Packet Storm
915 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の F1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3875 2025-01-22 16:42 2024-04-16 Show GitHub Exploit DB Packet Storm
916 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の F1202 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2024-3878 2025-01-22 16:41 2024-04-16 Show GitHub Exploit DB Packet Storm
917 9.8 緊急
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager における XML 外部エンティティの脆弱性 CWE-611
CWE-611
CVE-2024-3969 2025-01-22 16:41 2024-05-28 Show GitHub Exploit DB Packet Storm
918 5.4 警告
Network 		exclusiveaddons exclusive addons for elementor exclusiveaddons の WordPress 用 exclusive addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3985 2025-01-22 16:41 2024-05-2 Show GitHub Exploit DB Packet Storm
919 7.8 重要
Local 		フォーティネット FortiClient フォーティネットの Linux 用 FortiClient における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-15934 2025-01-22 16:41 2020-10-19 Show GitHub Exploit DB Packet Storm
920 5.4 警告
Network 		POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3199 2025-01-22 16:35 2024-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 - - - In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of pr… New - CVE-2024-40676 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
232 - - - In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User… New - CVE-2024-40675 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
233 - - - In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no add… New - CVE-2024-40674 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
234 - - - In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead to remote code exec… New - CVE-2024-40673 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
235 - - - In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additiona… New - CVE-2018-9378 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
236 - - - In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution pr… New - CVE-2018-9373 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
237 - - - In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution priv… New - CVE-2017-13318 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
238 - - - In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional ex… New - CVE-2017-13317 2025-01-29 05:15 2025-01-29 Show GitHub Exploit DB Packet Storm
239 - - - CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request. New - CVE-2024-57549 2025-01-29 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm
240 - - - CMSimple 5.16 allows the user to edit log.php file via print page. New - CVE-2024-57548 2025-01-29 05:15 2025-01-28 Show GitHub Exploit DB Packet Storm