Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 8, 2025, 6:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
91 5.3 警告
Network
IBM IBM Cognos Controller IBM の IBM Cognos Controller における観測可能な不一致に関する脆弱性 New CWE-203
CWE-204
CVE-2021-20556 2025-01-8 10:50 2024-05-1 Show GitHub Exploit DB Packet Storm
92 5.3 警告
Network
IBM IBM Cognos Controller IBM の IBM Cognos Controller におけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
CWE-350
CVE-2022-22364 2025-01-8 10:50 2022-01-3 Show GitHub Exploit DB Packet Storm
93 7.5 重要
Network
IBM IBM Cognos Controller IBM の IBM Cognos Controller における暗号アルゴリズムの使用に関する脆弱性 New CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2023-40696 2025-01-8 10:50 2023-08-18 Show GitHub Exploit DB Packet Storm
94 4.3 警告
Network
IBM IBM App Connect Enterprise IBM の IBM App Connect Enterprise における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
CWE-770
CVE-2024-28760 2025-01-8 10:50 2024-05-10 Show GitHub Exploit DB Packet Storm
95 4.3 警告
Physics
IBM IBM Cognos Command Center IBM の IBM Cognos Command Center における認証情報の不十分な保護に関する脆弱性 New CWE-256
CWE-522
CVE-2024-31899 2025-01-8 10:50 2024-09-25 Show GitHub Exploit DB Packet Storm
96 4.4 警告
Local
IBM IBM Security Guardium Key Lifecycle Manager IBM の IBM Security Guardium Key Lifecycle Manager における認証情報の不十分な保護に関する脆弱性 New CWE-260
CWE-522
CVE-2024-49817 2025-01-8 10:50 2024-11-7 Show GitHub Exploit DB Packet Storm
97 6.5 警告
Network
IBM IBM InfoSphere Information Server IBM の IBM InfoSphere Information Server における入力で指定された数量の不適切な検証に関する脆弱性 New CWE-1284
入力で指定された数量の不適切な検証
CVE-2024-52901 2025-01-8 10:50 2024-12-5 Show GitHub Exploit DB Packet Storm
98 5.4 警告
Network
averta Master Slider averta の WordPress 用 Master Slider におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2023-6382 2025-01-8 10:44 2023-11-29 Show GitHub Exploit DB Packet Storm
99 6.1 警告
Network
emlog emlog emlog におけるクロスサイトスクリプティングの脆弱性 New CWE-79
CWE-79
CWE-94
CVE-2024-12844 2025-01-8 10:44 2024-12-20 Show GitHub Exploit DB Packet Storm
100 5.4 警告
Network
leevio happy addons for elementor leevio の WordPress 用 happy addons for elementor におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1366 2025-01-8 10:44 2024-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 8, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows SQL Injection.This issue affects eDoc Easy Tables: … New CWE-89
SQL Injection
CVE-2025-22519 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
52 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KentoThemes Justified Image Gallery allows Stored XSS.This issue affects Justified Image Gallery:… New CWE-79
Cross-site Scripting
CVE-2025-22518 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
53 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ben Huson List Pages at Depth allows Stored XSS.This issue affects List Pages at Depth: from n/a … New CWE-79
Cross-site Scripting
CVE-2025-22517 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
54 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Patel Metadata SEO allows Stored XSS.This issue affects Metadata SEO: from n/a through 2.3. New CWE-79
Cross-site Scripting
CVE-2025-22516 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
55 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simon Chuang Show Google Analytics widget allows Stored XSS.This issue affects Show Google Analyt… New CWE-79
Cross-site Scripting
CVE-2025-22515 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
56 - - - Missing Authorization vulnerability in Sprout Apps Help Scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Help Scout: from n/a through 6.5.1. New CWE-862
 Missing Authorization
CVE-2025-22512 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
57 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ella van Durpe Slides & Presentations allows Stored XSS.This issue affects Slides & Presentations… New CWE-79
Cross-site Scripting
CVE-2025-22511 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
58 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Benjamin Santalucia (ben@woow-fr.com) WPMU Prefill Post allows SQL Injection.This issue affects W… New CWE-89
SQL Injection
CVE-2025-22507 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
59 - - - Cross-Site Request Forgery (CSRF) vulnerability in Digital Zoom Studio Admin debug wordpress – enable debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: … New CWE-352
 Origin Validation Error
CVE-2025-22503 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm
60 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mindvalley MindValley Super PageMash allows SQL Injection.This issue affects MindValley Super Pag… New CWE-89
SQL Injection
CVE-2025-22502 2025-01-8 01:15 2025-01-8 Show GitHub Exploit DB Packet Storm