Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1 9.8 緊急
Network
icontrolwp iControlWP icontrolwp の WordPress 用 iControlWP における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2024-13742 2025-01-31 17:40 2025-01-30 Show GitHub Exploit DB Packet Storm
2 5.4 警告
Network
ilghera MailUp Auto Subscription ilghera の WordPress 用 MailUp Auto Subscription におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2024-13521 2025-01-31 17:37 2025-01-28 Show GitHub Exploit DB Packet Storm
3 6.5 警告
Network
アップル visionos
Safari
iPadOS
複数のアップル製品における脆弱性 CWE-noinfo
情報不足
CVE-2025-24143 2025-01-31 17:31 2025-01-27 Show GitHub Exploit DB Packet Storm
4 5.5 警告
Local
- アップルの macOS における脆弱性 CWE-noinfo
情報不足
CVE-2025-24096 2025-01-31 17:29 2025-01-27 Show GitHub Exploit DB Packet Storm
5 5.5 警告
Local
- アップルの macOS における脆弱性 CWE-noinfo
情報不足
CVE-2024-54549 2025-01-31 17:27 2024-12-11 Show GitHub Exploit DB Packet Storm
6 8.8 重要
Network
アップル watchOS
visionos
Safari
iPadOS
iOS
tvOS
複数のアップル製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2024-54543 2025-01-31 17:26 2024-12-11 Show GitHub Exploit DB Packet Storm
7 9.1 緊急
Network
アップル watchOS
iPadOS
iOS
複数のアップル製品における脆弱性 CWE-noinfo
情報不足
CVE-2024-54512 2025-01-31 17:23 2024-12-11 Show GitHub Exploit DB Packet Storm
8 5.5 警告
Local
アップル iOS
visionos
iPadOS
watchOS
tvOS
複数のアップル製品における脆弱性 CWE-noinfo
情報不足
CVE-2025-24086 2025-01-31 17:21 2025-01-27 Show GitHub Exploit DB Packet Storm
9 6.7 警告
Local
デル Latitude 5414 Rugged ファームウェア
Latitude 5280 ファームウェア
Embedded Box PC 5000 ファームウェア
Latitude 5400 ファームウェア
Latitude 3189 ファームウェ…
複数のデル製品における脆弱性 CWE-20
CWE-noinfo
CVE-2024-22429 2025-01-31 16:37 2024-05-17 Show GitHub Exploit DB Packet Storm
10 5.4 警告
Network
Philantro Inc. Philantro - Donations and Donor Management Philantro Inc. の WordPress 用 Philantro - Donations and Donor Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-13527 2025-01-31 16:37 2025-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
991 - - - Missing Authorization vulnerability in Amento Tech Pvt ltd WPGuppy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPGuppy: from n/a through 1.1.0. CWE-862
 Missing Authorization
CVE-2025-24643 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
992 - - - Missing Authorization vulnerability in theme funda Setup Default Featured Image allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Setup Default Featured Imag… CWE-862
 Missing Authorization
CVE-2025-24642 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
993 - - - Insertion of Sensitive Information Into Sent Data vulnerability in GREYS Korea for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Korea for WooCommerce: from n/a through 1.1.… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-24639 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
994 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PhiloPress BP Email Assign Templates allows Reflected XSS. This issue affects BP Email Assign Tem… CWE-79
Cross-site Scripting
CVE-2025-24631 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
995 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Sikshya LMS allows Reflected XSS. This issue affects Sikshya LMS: from n/a through 0.… CWE-79
Cross-site Scripting
CVE-2025-24630 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
996 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPGear Import Excel to Gravity Forms allows Reflected XSS. This issue affects Import Excel to Gra… CWE-79
Cross-site Scripting
CVE-2025-24629 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
997 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound AIO Shortcodes allows Stored XSS. This issue affects AIO Shortcodes: from n/a through 1.… CWE-79
Cross-site Scripting
CVE-2025-24620 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
998 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in realmag777 WOLF allows Path Traversal. This issue affects WOLF: from n/a through 1.0.8.5. CWE-22
Path Traversal
CVE-2025-24605 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
999 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fatcat Apps Landing Page Cat allows Reflected XSS. This issue affects Landing Page Cat: from n/a … CWE-79
Cross-site Scripting
CVE-2025-24576 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1000 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev WooCommerce Receipt Uploader allows Reflected XSS. This issue affects P… CWE-79
Cross-site Scripting
CVE-2025-24574 2025-02-4 00:15 2025-02-4 Show GitHub Exploit DB Packet Storm