Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
971 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10
Microsoft Windows 11
Microsoft Windows Server 2025
Microsoft Windows Server&… 		Windows 仮想化ベース セキュリティ (VBS) のセキュリティ機能バイパスの脆弱性 CWE-284
CWE-noinfo
CVE-2025-21340 2025-01-22 16:54 2025-01-14 Show GitHub Exploit DB Packet Storm
972 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-57801 2025-01-22 16:52 2024-12-23 Show GitHub Exploit DB Packet Storm
973 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-57882 2025-01-22 16:52 2024-12-30 Show GitHub Exploit DB Packet Storm
974 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2024-57890 2025-01-22 16:52 2024-12-4 Show GitHub Exploit DB Packet Storm
975 5.6 警告
Local 		マイクロソフト Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microsoft Windows 10
Microsoft Window… 		Windows 暗号化の情報漏えいの脆弱性 CWE-noinfo
情報不足 		CVE-2025-21336 2025-01-22 16:52 2025-01-14 Show GitHub Exploit DB Packet Storm
976 7.8 重要
Local 		Linux Linux Kernel Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2024-57900 2025-01-22 16:49 2024-12-30 Show GitHub Exploit DB Packet Storm
977 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における脆弱性 CWE-noinfo
情報不足 		CVE-2024-57895 2025-01-22 16:47 2024-12-10 Show GitHub Exploit DB Packet Storm
978 5.5 警告
Local 		Linux Linux Kernel Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-36476 2025-01-22 16:45 2024-12-31 Show GitHub Exploit DB Packet Storm
979 5.4 警告
Network 		デル elastic cloud storage デルの elastic cloud storage における Capture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2024-52534 2025-01-22 16:44 2024-12-25 Show GitHub Exploit DB Packet Storm
980 7.2 重要
Network 		フォーティネット FortiAnalyzer
FortiManager 		フォーティネットの FortiAnalyzer および FortiManager におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-33502 2025-01-22 16:43 2024-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1311 - - - Discourse is an open source platform for community discussion. In affected versions an attacker can make craft an XHR request to poison the anonymous cache (for example, the cache may have a response… CWE-346
 Origin Validation Error 		CVE-2024-55948 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1312 2.7 LOW
Network 		- - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This inform… CWE-209
Information Exposure Through an Error Message 		CVE-2024-45658 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1313 5.0 MEDIUM
Local 		- - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2024-45657 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1314 5.9 MEDIUM
Network 		- - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized acto… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-43187 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1315 6.1 MEDIUM
Network 		- - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript cod… CWE-79
Cross-site Scripting 		CVE-2024-40700 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1316 6.5 MEDIUM
Network 		- - IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transm… CWE-352
 Origin Validation Error 		CVE-2024-35138 2025-02-5 06:15 2025-02-5 Show GitHub Exploit DB Packet Storm
1317 - - - The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against … - CVE-2024-13099 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1318 - - - The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be … - CVE-2024-13098 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1319 - - - The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against h… - CVE-2024-13097 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm
1320 - - - The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored … - CVE-2024-13096 2025-02-5 06:15 2025-02-1 Show GitHub Exploit DB Packet Storm