Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
951 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53206 2025-01-17 09:44 2024-11-28 Show GitHub Exploit DB Packet Storm
952 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56602 2025-01-17 09:44 2024-10-15 Show GitHub Exploit DB Packet Storm
953 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2021-47218 2025-01-17 09:44 2021-11-19 Show GitHub Exploit DB Packet Storm
954 7.8 重要
Local 		Debian
Linux		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2024-26704 2025-01-17 09:44 2024-01-18 Show GitHub Exploit DB Packet Storm
955 7.8 重要
Local 		Debian
Linux		 Linux Kernel
Debian GNU/Linux 		Linux の Linux Kernel 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-27396 2025-01-17 09:44 2024-04-24 Show GitHub Exploit DB Packet Storm
956 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-53171 2025-01-17 09:44 2024-11-14 Show GitHub Exploit DB Packet Storm
957 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-56604 2025-01-17 09:44 2024-10-15 Show GitHub Exploit DB Packet Storm
958 4.3 警告
Network 		IBM IBM InfoSphere Information Server IBM の IBM InfoSphere Information Server におけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2024-51460 2025-01-17 08:52 2024-12-5 Show GitHub Exploit DB Packet Storm
959 6.8 警告
Physics 		Huawei Yale-AL50A ファームウェア
Princeton-AL10D ファームウェア
P30 Pro ファームウェア
Yale-AL00A ファームウェア
Mate 20 ファームウェア
P30 ファームウェア
YaleP-AL10B ファームウェア 		複数の Huawei 製品における不正な認証に関する脆弱性 CWE-285
CWE-863
CVE-2020-9081 2025-01-16 18:13 2020-02-18 Show GitHub Exploit DB Packet Storm
960 7.5 重要
Network 		マイクロソフト Microsoft Copilot Studio Copilot Studio の情報漏えいの脆弱性 CWE-200
CWE-noinfo
CVE-2024-43610 2025-01-16 18:08 2024-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in heart5 StatPressCN allows Reflected XSS. This issue affects StatPressCN: from n/a through 1.9.1. New CWE-79
Cross-site Scripting 		CVE-2025-23544 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
22 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in edmon Download, Downloads allows Reflected XSS. This issue affects Download, Downloads : from n/… New CWE-79
Cross-site Scripting 		CVE-2025-23541 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
23 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohsin khan WP Front-end login and register allows Reflected XSS. This issue affects WP Front-end… New CWE-79
Cross-site Scripting 		CVE-2025-23540 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
24 - - - Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Media Library Mime Type allows Stored XSS. This issue affects Rocket Media Library Mime Type: from n/a through 2.1.0. New CWE-352
 Origin Validation Error 		CVE-2025-22768 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
25 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tarak Patel WP Query Creator allows Reflected XSS. This issue affects WP Query Creator: from n/a … New CWE-79
Cross-site Scripting 		CVE-2025-22264 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
26 - - - It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authenticatio… New CWE-287
Improper Authentication 		CVE-2025-0637 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
27 - - - SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server. New - CVE-2024-55971 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
28 - - - ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection. New - CVE-2024-52325 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
29 - - - The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles whil… New - CVE-2024-10846 2025-01-24 01:15 2025-01-24 Show GitHub Exploit DB Packet Storm
30 - - - A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. New - CVE-2025-24403 2025-01-24 01:15 2025-01-23 Show GitHub Exploit DB Packet Storm