Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1171 9.8 緊急
Network
Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2024-3421 2025-01-20 18:24 2024-04-7 Show GitHub Exploit DB Packet Storm
1172 6.1 警告
Network
Argie Online courseware Argie の Online courseware におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3428 2025-01-20 18:24 2024-04-7 Show GitHub Exploit DB Packet Storm
1173 5.4 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-3743 2025-01-20 18:24 2024-05-2 Show GitHub Exploit DB Packet Storm
1174 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. ac500 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の ac500 ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2024-3908 2025-01-20 18:24 2024-04-17 Show GitHub Exploit DB Packet Storm
1175 5.4 警告
Network
Jenkins プロジェクト OWASP Dependency-Check Jenkins プロジェクトの Jenkins 用 OWASP Dependency-Check におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-28153 2025-01-20 18:22 2024-03-6 Show GitHub Exploit DB Packet Storm
1176 5.4 警告
Network
Nextend Nextend Social Login and Register Nextend の WordPress 用 Nextend Social Login and Register におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1775 2025-01-20 18:17 2024-03-2 Show GitHub Exploit DB Packet Storm
1177 4.8 警告
Network
Joseph LoPreste Restaurant Solutions - Checklist Joseph LoPreste の WordPress 用 Restaurant Solutions - Checklist におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-1977 2025-01-20 18:17 2024-02-29 Show GitHub Exploit DB Packet Storm
1178 4.3 警告
Network
kaliforms kali forms kaliforms の WordPress 用 kali forms における脆弱性 CWE-noinfo
情報不足
CVE-2024-1217 2025-01-20 18:10 2024-02-29 Show GitHub Exploit DB Packet Storm
1179 4.6 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2091 2025-01-20 18:10 2024-03-28 Show GitHub Exploit DB Packet Storm
1180 5.4 警告
Network
WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-2792 2025-01-20 18:10 2024-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
941 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Gwolle Guestbook allows Reflected XSS. This issue affects Gwolle Guestbook: from n/a t… CWE-79
Cross-site Scripting
CVE-2025-24710 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
942 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paytm Paytm Payment Donation allows Reflected XSS. This issue affects Paytm Payment Donation: fro… CWE-79
Cross-site Scripting
CVE-2025-24635 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
943 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce allows Reflected XSS. This issue affects Advan… CWE-79
Cross-site Scripting
CVE-2025-24632 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
944 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PortOne PORTONE ???? ?? allows Reflected XSS. This issue affects PORTONE ???? ??: from n/a throug… CWE-79
Cross-site Scripting
CVE-2025-24609 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
945 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue allows Reflected XSS. This issue affects GD Mail Queue: from n/a thr… CWE-79
Cross-site Scripting
CVE-2025-24608 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
946 - - - Insertion of Sensitive Information Into Sent Data vulnerability in UkrSolution Barcode Generator for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Barcode Generator for WooC… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2025-24597 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
947 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This i… CWE-79
Cross-site Scripting
CVE-2025-24563 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
948 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesome TOGI Awesome Event Booking allows Reflected XSS. This issue affects Awesome Event Booking… CWE-79
Cross-site Scripting
CVE-2025-24560 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
949 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OneTeamSoftware Radio Buttons and Swatches for WooCommerce allows Reflected XSS. This issue affec… CWE-79
Cross-site Scripting
CVE-2025-24551 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm
950 - - - Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS. This issue affects Post Meta: from n/a through 1.0.9. CWE-352
 Origin Validation Error
CVE-2025-24549 2025-01-31 18:15 2025-01-31 Show GitHub Exploit DB Packet Storm