Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1601 5.3 警告
Network 		NetApp
日本電気
ISC, Inc.		 Active IQ Unified Manager
ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
BIND 		ISC, Inc. の BIND 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2023-5680 2025-01-17 13:18 2023-10-20 Show GitHub Exploit DB Packet Storm
1602 7.5 重要
Network 		日本電気
Fedora Project
NetApp
ISC, Inc.		 ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND 		NetApp の Active IQ Unified Manager 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2023-5679 2025-01-17 13:13 2023-10-20 Show GitHub Exploit DB Packet Storm
1603 7.5 重要
Network 		日本電気
Fedora Project
NetApp
ISC, Inc.		 ESMPRO/ServerAgent
NEC Multimedia OLAP for 映像分析サービス
Active IQ Unified Manager
Fedora
BIND 		NetApp の Active IQ Unified Manager 等複数ベンダの製品における到達可能なアサーションに関する脆弱性 CWE-617
CWE-617
CVE-2023-5517 2025-01-17 13:12 2023-10-11 Show GitHub Exploit DB Packet Storm
1604 7.5 重要
Network 		Fedora Project
日本電気
ISC, Inc.		 NEC Multimedia OLAP for 映像分析サービス
Fedora
ESMPRO/ServerAgent
BIND 		NetApp の ONTAP (旧 Clustered Data ONTAP) 等複数ベンダの製品における脆弱性 CWE-noinfo
情報不足 		CVE-2023-4408 2025-01-17 13:10 2023-08-18 Show GitHub Exploit DB Packet Storm
1605 9.8 緊急
Network 		Apache Software Foundation Apache Struts Apache Struts 2 における外部からアクセス可能なファイルの脆弱性 (S2-066) CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2023-50164 2025-01-17 12:58 2023-12-8 Show GitHub Exploit DB Packet Storm
1606 9.8 緊急
Network 		Apache Software Foundation hertzbeat Apache Software Foundation の hertzbeat におけるインジェクションに関する脆弱性 CWE-74
CWE-74
CVE-2023-51388 2025-01-17 12:08 2023-12-18 Show GitHub Exploit DB Packet Storm
1607 9.8 緊急
Network 		Ivanti Avalanche Ivanti の Avalanche におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CWE-288
CVE-2024-13179 2025-01-17 12:08 2025-01-14 Show GitHub Exploit DB Packet Storm
1608 5.4 警告
Network 		Themeisle Orbit Fox ThemeIsle の WordPress 用 Orbit Fox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-13183 2025-01-17 12:08 2025-01-10 Show GitHub Exploit DB Packet Storm
1609 4.3 警告
Network 		Progress Software Corporation MOVEit Transfer Progress Software Corporation の MOVEit Transfer における脆弱性 CWE-778
CWE-Other
CVE-2024-2291 2025-01-17 12:08 2024-03-20 Show GitHub Exploit DB Packet Storm
1610 4.8 警告
Network 		MantisBT Group MantisBT MantisBT Group の MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-79
CVE-2024-34081 2025-01-17 12:08 2024-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
381 6.4 MEDIUM
Network 		- - The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'theme_options_ajax_post_… New CWE-862
 Missing Authorization 		CVE-2024-13769 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
382 6.4 MEDIUM
Network 		- - The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization … New CWE-79
Cross-site Scripting 		CVE-2024-13665 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
383 6.4 MEDIUM
Network 		- - The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and including, 3.2.1 due to i… New CWE-79
Cross-site Scripting 		CVE-2024-13658 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
384 8.1 HIGH
Network 		- - The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check … New CWE-862
 Missing Authorization 		CVE-2024-13656 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
385 8.1 HIGH
Network 		- - The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the… New CWE-862
 Missing Authorization 		CVE-2024-13654 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
386 8.8 HIGH
Network 		- - The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on th… New CWE-862
 Missing Authorization 		CVE-2024-13653 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
387 9.8 CRITICAL
Network 		- - The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed… New CWE-266
 Incorrect Privilege Assignment 		CVE-2024-13421 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
388 4.3 MEDIUM
Network 		- - The WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_set… New CWE-862
 Missing Authorization 		CVE-2024-12164 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
389 6.4 MEDIUM
Network 		- - The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_brand' sh… New CWE-79
Cross-site Scripting 		CVE-2024-11746 2025-02-12 14:15 2025-02-12 Show GitHub Exploit DB Packet Storm
390 4.3 MEDIUM
Network 		- - The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing or incorrect nonce validation on the "de… New CWE-352
 Origin Validation Error 		CVE-2025-0808 2025-02-12 13:15 2025-02-12 Show GitHub Exploit DB Packet Storm