Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
961 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server&…
Windows 仮想化ベース セキュリティ (VBS) のセキュリティ機能バイパスの脆弱性 CWE-284
CWE-noinfo
CVE-2025-21340 2025-01-22 16:54 2025-01-14 Show GitHub Exploit DB Packet Storm
962 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2024-57801 2025-01-22 16:52 2024-12-23 Show GitHub Exploit DB Packet Storm
963 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2024-57882 2025-01-22 16:52 2024-12-30 Show GitHub Exploit DB Packet Storm
964 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2024-57890 2025-01-22 16:52 2024-12-4 Show GitHub Exploit DB Packet Storm
965 5.6 警告
Local
マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 10
Microsoft Window…
Windows 暗号化の情報漏えいの脆弱性 CWE-noinfo
情報不足
CVE-2025-21336 2025-01-22 16:52 2025-01-14 Show GitHub Exploit DB Packet Storm
966 7.8 重要
Local
Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2024-57900 2025-01-22 16:49 2024-12-30 Show GitHub Exploit DB Packet Storm
967 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足
CVE-2024-57895 2025-01-22 16:47 2024-12-10 Show GitHub Exploit DB Packet Storm
968 5.5 警告
Local
Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2024-36476 2025-01-22 16:45 2024-12-31 Show GitHub Exploit DB Packet Storm
969 5.4 警告
Network
デル elastic cloud storage デルの elastic cloud storage における Capture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避
CVE-2024-52534 2025-01-22 16:44 2024-12-25 Show GitHub Exploit DB Packet Storm
970 7.2 重要
Network
フォーティネット FortiAnalyzer
FortiManager
フォーティネットの FortiAnalyzer および FortiManager におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2024-33502 2025-01-22 16:43 2024-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271 - - - A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video f… New - CVE-2024-53615 2025-01-31 00:15 2025-01-31 Show GitHub Exploit DB Packet Storm
272 4.3 MEDIUM
Network
- - The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.25.10 via the 'elementor-template' shortcode. This makes… New CWE-200
Information Exposure
CVE-2024-8494 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
273 8.8 HIGH
Network
- - The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, … New CWE-352
 Origin Validation Error
CVE-2024-13720 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
274 4.3 MEDIUM
Network
- - The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the zstore_clear_cache() function in all versions up to, and including, 3… New CWE-862
 Missing Authorization
CVE-2024-13715 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
275 8.8 HIGH
Network
- - The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the gky_ima… New CWE-352
 Origin Validation Error
CVE-2024-13707 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
276 6.1 MEDIUM
Network
- - The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 9.8… New CWE-79
Cross-site Scripting
CVE-2024-13705 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
277 9.8 CRITICAL
Network
- - The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the… New CWE-502
 Deserialization of Untrusted Data
CVE-2024-13742 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
278 7.5 HIGH
Network
- - The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.1 via the read_score_file() function. This makes it possible for unauthenticat… New CWE-22
Path Traversal
CVE-2024-13671 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
279 6.4 MEDIUM
Network
- - The Music Sheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pn_msv' shortcode in all versions up to, and including, 4.1 due to insufficient input saniti… New CWE-79
Cross-site Scripting
CVE-2024-13670 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm
280 6.4 MEDIUM
Network
- - The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpb_post_list_table' shortcode in all versions up to, and including, 1.0.3 due to insufficie… New CWE-79
Cross-site Scripting
CVE-2024-13664 2025-01-30 23:15 2025-01-30 Show GitHub Exploit DB Packet Storm