Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
921 9.8 緊急
Network 		Stranger Studios Paid Memberships Pro Stranger Studios の WordPress 用 Paid Memberships Pro におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2024-37277 2025-01-23 11:18 2024-11-1 Show GitHub Exploit DB Packet Storm
922 8.8 重要
Network 		Themeum Tutor LMS Themeum の WordPress 用 Tutor LMS における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-4351 2025-01-23 11:18 2024-05-16 Show GitHub Exploit DB Packet Storm
923 5.4 警告
Network 		moveaddons move addons for elementor moveaddons の WordPress 用 move addons for elementor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-47364 2025-01-23 11:18 2024-10-6 Show GitHub Exploit DB Packet Storm
924 8.8 重要
Network 		webangon the pack elementor addons webangon の WordPress 用 the pack elementor addons におけるパストラバーサルの脆弱性 CWE-22
CWE-23
CVE-2024-50453 2025-01-23 11:18 2024-10-28 Show GitHub Exploit DB Packet Storm
925 5.4 警告
Network 		themelooks enter addons themelooks の WordPress 用 enter addons におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-56252 2025-01-23 11:18 2024-12-18 Show GitHub Exploit DB Packet Storm
926 8.8 重要
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-51359 2025-01-23 11:09 2023-12-18 Show GitHub Exploit DB Packet Storm
927 8.8 重要
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-51360 2025-01-23 11:09 2023-12-18 Show GitHub Exploit DB Packet Storm
928 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1408 2025-01-23 11:09 2024-02-29 Show GitHub Exploit DB Packet Storm
929 5.4 警告
Network 		Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1497 2025-01-23 11:09 2024-03-13 Show GitHub Exploit DB Packet Storm
930 5.4 警告
Network 		properfraction profilepress properfraction の WordPress 用 profilepress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1570 2025-01-23 11:09 2024-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 7.8 HIGH
Local 		apple macos An integer overflow was addressed through improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to elevate privileges. CWE-190
 Integer Overflow or Wraparound 		CVE-2025-24156 2025-01-31 01:43 2025-01-28 Show GitHub Exploit DB Packet Storm
1022 5.5 MEDIUM
Local 		apple iphone_os
visionos
macos
watchos
tvos
ipados 		The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a… NVD-CWE-noinfo
CVE-2025-24161 2025-01-31 01:34 2025-01-28 Show GitHub Exploit DB Packet Storm
1023 7.5 HIGH
Network 		apple ipados
iphone_os
macos 		A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. A remote attacker may be able to cause a denial-of-servic… CWE-476
 NULL Pointer Dereference 		CVE-2025-24177 2025-01-31 01:26 2025-01-28 Show GitHub Exploit DB Packet Storm
1024 - - - go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixe… CWE-248
 Uncaught Exception 		CVE-2025-24883 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1025 - - - kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The policy group feature, added to by the 1.17.0 release. By being namespaced, … CWE-285
Improper Authorization 		CVE-2025-24784 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1026 - - - kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespace… CWE-285
CWE-155
CVE-2025-24376 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1027 - - - Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kube… CWE-200
CWE-209
Information Exposure
Information Exposure Through an Error Message 		CVE-2025-23216 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1028 - - - VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plu… - CVE-2025-22222 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1029 - - - VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious scrip… - CVE-2025-22221 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm
1030 - - - VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform … - CVE-2025-22219 2025-01-31 01:15 2025-01-31 Show GitHub Exploit DB Packet Storm