Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
971	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 Microsoft Windows 11 Microsoft Windows Server 2025 Microsoft Windows Server&…	Windows 仮想化ベースセキュリティ (VBS) のセキュリティ機能バイパスの脆弱性	CWE-284 CWE-noinfo	CVE-2025-21340	2025-01-22 16:54	2025-01-14	Show	GitHub Exploit DB Packet Storm

972	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-57801	2025-01-22 16:52	2024-12-23	Show	GitHub Exploit DB Packet Storm

973	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2024-57882	2025-01-22 16:52	2024-12-30	Show	GitHub Exploit DB Packet Storm

974	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2024-57890	2025-01-22 16:52	2024-12-4	Show	GitHub Exploit DB Packet Storm

975	5.6	警告 Local	マイクロソフト	Microsoft Windows Server 2008 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microsoft Windows 10 Microsoft Window…	Windows 暗号化の情報漏えいの脆弱性	CWE-noinfo 情報不足	CVE-2025-21336	2025-01-22 16:52	2025-01-14	Show	GitHub Exploit DB Packet Storm

976	7.8	重要 Local	Linux	Linux Kernel	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-57900	2025-01-22 16:49	2024-12-30	Show	GitHub Exploit DB Packet Storm

977	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における脆弱性	CWE-noinfo 情報不足	CVE-2024-57895	2025-01-22 16:47	2024-12-10	Show	GitHub Exploit DB Packet Storm

978	5.5	警告 Local	Linux	Linux Kernel	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2024-36476	2025-01-22 16:45	2024-12-31	Show	GitHub Exploit DB Packet Storm

979	5.4	警告 Network	デル	elastic cloud storage	デルの elastic cloud storage における Capture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2024-52534	2025-01-22 16:44	2024-12-25	Show	GitHub Exploit DB Packet Storm

980	7.2	重要 Network	フォーティネット	FortiAnalyzer FortiManager	フォーティネットの FortiAnalyzer および FortiManager におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-33502	2025-01-22 16:43	2024-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1451	-	-	-	Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, due to a lack of CSRF protection and the lack of proper security attrib…	CWE-352 CWE-614 CWE-1275 Origin Validation Error Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Sensitive Cookie with Improper SameSite Attribute	CVE-2025-24897	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1452	-	-	-	Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, a login token named `token` is stored in a cookie for authentication pu…	CWE-613 Insufficient Session Expiration	CVE-2025-24896	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1453	-	-	-	eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per …	CWE-345 Insufficient Verification of Data Authenticity	CVE-2025-24807	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1454	-	-	-	A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.	CWE-121 Stack-based Buffer Overflow	CVE-2025-22467	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1455	-	-	-	Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of cookies for MediaProxy authentication, the…	CWE-352 Origin Validation Error	CVE-2025-24900	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1456	-	-	-	OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.	CWE-78 OS Command	CVE-2024-47908	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1457	-	-	-	Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read …	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-13843	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1458	-	-	-	A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2024-13842	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1459	-	-	-	Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-13813	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

1460	-	-	-	External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to read …	CWE-73 External Control of File Name or Path	CVE-2024-12058	2025-02-12 01:15	2025-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed