Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1351 4.3 警告
Network 		LadiPage LadiPage WordPress 用 LadiPage におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2023-4729 2025-01-20 11:15 2023-09-1 Show GitHub Exploit DB Packet Storm
1352 6.5 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-1358 2025-01-20 11:06 2024-03-13 Show GitHub Exploit DB Packet Storm
1353 5.4 警告
Network 		WebTechStreet Elementor Addon Elements WebTechStreet の WordPress 用 Elementor Addon Elements におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-1391 2025-01-20 11:06 2024-03-13 Show GitHub Exploit DB Packet Storm
1354 8.8 重要
Network 		Metagauss Inc. registrationmagic Metagauss Inc. の WordPress 用 registrationmagic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-1990 2025-01-20 11:06 2024-04-9 Show GitHub Exploit DB Packet Storm
1355 5.3 警告
Network 		PrestaShop PrestaShop PrestaShop におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CVE-2024-26129 2025-01-20 11:06 2024-02-19 Show GitHub Exploit DB Packet Storm
1356 6.5 警告
Network 		Contao contao Contao における脆弱性 CWE-200
CWE-noinfo
CVE-2024-28235 2025-01-20 11:06 2024-04-9 Show GitHub Exploit DB Packet Storm
1357 9.8 緊急
Network 		Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3418 2025-01-20 11:06 2024-04-7 Show GitHub Exploit DB Packet Storm
1358 9.8 緊急
Network 		Argie Online courseware Argie の Online courseware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3420 2025-01-20 11:06 2024-04-7 Show GitHub Exploit DB Packet Storm
1359 9.8 緊急
Network 		oretnom23 Laundry Shop Management System oretnom23 の Laundry Shop Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-3445 2025-01-20 11:06 2024-04-8 Show GitHub Exploit DB Packet Storm
1360 7.8 重要
Local 		Ivanti connect secure
policy secure 		Ivanti の connect secure および policy secure における脆弱性 CWE-267
CWE-426
CWE-426
CWE-Other
CVE-2024-47906 2025-01-20 11:06 2024-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 - - - Cross-Site Request Forgery (CSRF) vulnerability in Danillo Nunes Login-box allows Stored XSS. This issue affects Login-box: from n/a through 2.0.4. CWE-352
 Origin Validation Error 		CVE-2025-25149 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
412 - - - Cross-Site Request Forgery (CSRF) vulnerability in ElbowRobo Read More Copy Link allows Stored XSS. This issue affects Read More Copy Link: from n/a through 1.0.2. CWE-352
 Origin Validation Error 		CVE-2025-25148 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
413 - - - Cross-Site Request Forgery (CSRF) vulnerability in Phillip.Gooch Auto SEO allows Stored XSS. This issue affects Auto SEO: from n/a through 2.5.6. CWE-352
 Origin Validation Error 		CVE-2025-25147 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
414 - - - Cross-Site Request Forgery (CSRF) vulnerability in saleandro Songkick Concerts and Festivals allows Cross Site Request Forgery. This issue affects Songkick Concerts and Festivals: from n/a through 0.… CWE-352
 Origin Validation Error 		CVE-2025-25146 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
415 - - - Cross-Site Request Forgery (CSRF) vulnerability in jordan.hatch Infusionsoft Analytics allows Cross Site Request Forgery. This issue affects Infusionsoft Analytics: from n/a through 2.0. CWE-352
 Origin Validation Error 		CVE-2025-25145 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
416 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theasys Theasys allows Stored XSS. This issue affects Theasys: from n/a through 1.0.1. CWE-79
Cross-site Scripting 		CVE-2025-25144 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
417 - - - Cross-Site Request Forgery (CSRF) vulnerability in ibasit GlobalQuran allows Cross Site Request Forgery. This issue affects GlobalQuran: from n/a through 1.0. CWE-352
 Origin Validation Error 		CVE-2025-25143 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
418 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zankover Fami Sales Popup allows PHP Local File Inclusion. This issue affects … CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2025-25141 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
419 - - - Cross-Site Request Forgery (CSRF) vulnerability in Scriptonite Simple User Profile allows Stored XSS. This issue affects Simple User Profile: from n/a through 1.9. CWE-352
 Origin Validation Error 		CVE-2025-25140 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm
420 - - - Cross-Site Request Forgery (CSRF) vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed allows Stored XSS. This issue affects WP Custom Post RSS Feed: from n/a through 1.0.0. CWE-352
 Origin Validation Error 		CVE-2025-25139 2025-02-7 19:15 2025-02-7 Show GitHub Exploit DB Packet Storm