Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
941 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office 		Microsoft Office のセキュリティ機能のバイパスの脆弱性 CWE-693
CWE-noinfo
CVE-2025-21346 2025-01-22 18:14 2025-01-14 Show GitHub Exploit DB Packet Storm
942 9.8 緊急
Network 		The Biosig Project
Fedora Project		 libbiosig
Fedora 		The Biosig Project の libbiosig 等複数ベンダの製品における境界外書き込みに関する脆弱性 CWE-122
CWE-787
CVE-2024-21795 2025-01-22 18:12 2024-02-20 Show GitHub Exploit DB Packet Storm
943 7.5 重要
Network 		マイクロソフト Microsoft Windows 11 Windows Web Threat Defense ユーザー サービスの情報漏えいの脆弱性 CWE-269
CWE-noinfo
CVE-2025-21343 2025-01-22 18:11 2025-01-14 Show GitHub Exploit DB Packet Storm
944 8.8 重要
Network 		マイクロソフト Microsoft Windows 11
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows 10
Microsoft Windows Server&… 		Windows テレフォニー サービスのリモートでコードが実行される脆弱性 CWE-122
CWE-noinfo
CVE-2025-21339 2025-01-22 18:06 2025-01-14 Show GitHub Exploit DB Packet Storm
945 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-57896 2025-01-22 18:03 2024-12-6 Show GitHub Exploit DB Packet Storm
946 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-57892 2025-01-22 18:00 2024-12-30 Show GitHub Exploit DB Packet Storm
947 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-57841 2025-01-22 17:57 2024-12-23 Show GitHub Exploit DB Packet Storm
948 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2024-57802 2025-01-22 17:54 2024-12-23 Show GitHub Exploit DB Packet Storm
949 8.8 重要
Network 		フォーティネット FortiOS フォーティネットの FortiOS における境界外書き込みに関する脆弱性 CWE-121
CWE-787
CVE-2020-12820 2025-01-22 17:44 2020-09-24 Show GitHub Exploit DB Packet Storm
950 6.5 警告
Local 		フォーティネット FortiWLC フォーティネットの FortiWLC における初期化されていないポインタのアクセスに関する脆弱性 CWE-824
初期化されていないポインタのアクセス 		CVE-2021-26093 2025-01-22 17:44 2021-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 6.3 MEDIUM
Network 		- - A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the ar… - CVE-2025-0949 2025-02-4 03:15 2025-02-2 Show GitHub Exploit DB Packet Storm
1292 6.3 MEDIUM
Network 		- - A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument in… - CVE-2025-0948 2025-02-4 03:15 2025-02-2 Show GitHub Exploit DB Packet Storm
1293 - - - EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to Command injection. - CVE-2024-55062 2025-02-4 03:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1294 - - - Incorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 allows unauthorized attackers to access system logcat logs. - CVE-2024-54728 2025-02-4 03:15 2025-01-28 Show GitHub Exploit DB Packet Storm
1295 - - - macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state. - CVE-2024-57433 2025-02-4 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1296 - - - In EasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0, the AES encryption keys used to encrypt passwords are not stored securely. - CVE-2024-53357 2025-02-4 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1297 - - - A Host Header Injection vulnerability exists in CTFd 3.7.5, due to the application failing to properly validate or sanitize the Host header. An attacker can manipulate the Host header in HTTP request… - CVE-2025-23001 2025-02-4 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1298 - - - A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain … - CVE-2025-22957 2025-02-4 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1299 - - - macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for subs… - CVE-2024-57432 2025-02-4 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1300 - - - OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter. - CVE-2024-53584 2025-02-4 02:15 2025-02-1 Show GitHub Exploit DB Packet Storm