Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 22, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 5.4 警告
Network 		WPDeveloper essential blocks WPDeveloper の WordPress 用 essential blocks におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-3818 2025-01-22 10:37 2024-04-19 Show GitHub Exploit DB Packet Storm
132 6.5 警告
Network 		Mattermost, Inc. Mattermost Mobile Mattermost, Inc. の Mattermost Mobile における脆弱性 New CWE-400
CWE-noinfo
CVE-2024-3872 2025-01-22 10:37 2024-04-16 Show GitHub Exploit DB Packet Storm
133 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. ac500 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の ac500 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-3906 2025-01-22 10:37 2024-04-17 Show GitHub Exploit DB Packet Storm
134 9.8 緊急
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager における信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
CWE-502
CVE-2024-3967 2025-01-22 10:37 2024-05-15 Show GitHub Exploit DB Packet Storm
135 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. 4g300 ファームウェア Shenzhen Tenda Technology Co.,Ltd. の 4g300 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-121
CWE-787
CVE-2024-4170 2025-01-22 10:37 2024-04-25 Show GitHub Exploit DB Packet Storm
136 9.8 緊急
Network 		アバイア Avaya IP Office アバイアの Avaya IP Office における危険なタイプのファイルの無制限アップロードに関する脆弱性 New CWE-434
CWE-434
CVE-2024-4197 2025-01-22 10:37 2024-06-25 Show GitHub Exploit DB Packet Storm
137 7.4 重要
Network 		マイクロフォーカス株式会社 imanager マイクロフォーカス株式会社の imanager におけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
CWE-352
CVE-2024-4429 2025-01-22 10:37 2024-05-28 Show GitHub Exploit DB Packet Storm
138 6.4 警告
Network 		cvat computer vision annotation tool cvat の computer vision annotation tool における認証の欠如に関する脆弱性 New CWE-862
CWE-862
CVE-2024-45393 2025-01-22 10:37 2024-09-10 Show GitHub Exploit DB Packet Storm
139 7.5 重要
Network 		BlackBerry QNX Software Development Platform BlackBerry の QNX Software Development Platform における NULL ポインタデリファレンスに関する脆弱性 New CWE-476
CWE-476
CVE-2024-48857 2025-01-22 10:37 2024-10-8 Show GitHub Exploit DB Packet Storm
140 6.5 警告
Network 		デル elastic cloud storage デルの elastic cloud storage における整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2024-51540 2025-01-22 10:37 2024-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 22, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 - - - Cross-Site Request Forgery (CSRF) vulnerability in mastersoftwaresolutions WP VTiger Synchronization allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through 1.1.1. CWE-352
 Origin Validation Error 		CVE-2025-23455 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
622 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: fro… CWE-79
Cross-site Scripting 		CVE-2025-23453 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
623 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EditionGuard Dev Team EditionGuard for WooCommerce – eBook Sales with DRM allows Reflected XSS.Th… CWE-79
Cross-site Scripting 		CVE-2025-23452 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
624 - - - Cross-Site Request Forgery (CSRF) vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1. CWE-352
 Origin Validation Error 		CVE-2025-23445 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
625 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Scroll Top Advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2025-23444 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
626 - - - Cross-Site Request Forgery (CSRF) vulnerability in matias s Shockingly Big IE6 Warning allows Stored XSS.This issue affects Shockingly Big IE6 Warning: from n/a through 1.6.3. CWE-352
 Origin Validation Error 		CVE-2025-23442 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
627 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MarvinLabs WP PT-Viewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through 2.… CWE-79
Cross-site Scripting 		CVE-2025-23438 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
628 - - - Cross-Site Request Forgery (CSRF) vulnerability in Capa Wp-Scribd-List allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through 1.2. CWE-352
 Origin Validation Error 		CVE-2025-23436 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
629 - - - Cross-Site Request Forgery (CSRF) vulnerability in David Marcucci Password Protect Plugin for WordPress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through 0.… CWE-352
 Origin Validation Error 		CVE-2025-23435 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm
630 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Albertolabs.com Easy EU Cookie law allows Stored XSS.This issue affects Easy EU Cookie law: from … CWE-79
Cross-site Scripting 		CVE-2025-23434 2025-01-17 05:15 2025-01-17 Show GitHub Exploit DB Packet Storm