Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
161 6.1 警告
Network
Liferay Digital Experience Platform Liferay の Digital Experience Platform におけるオープンリダイレクトの脆弱性 CWE-601
CWE-601
CVE-2023-5190 2025-01-30 11:14 2023-09-26 Show GitHub Exploit DB Packet Storm
162 4.3 警告
Network
WordPress Go Go Custom Field Template WordPress Go Go の WordPress 用 Custom Field Template における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納
CVE-2023-6748 2025-01-30 11:14 2023-12-12 Show GitHub Exploit DB Packet Storm
163 4.8 警告
Network
WordPress Go Go Custom Field Template WordPress Go Go の WordPress 用 Custom Field Template におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-0653 2025-01-30 11:14 2024-06-11 Show GitHub Exploit DB Packet Storm
164 7.3 重要
Network
Cozmoslabs Membership & Content Restriction - Paid Member Subscriptions Cozmoslabs の WordPress 用 Membership & Content Restriction - Paid Member Subscriptions におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2024-10261 2025-01-30 11:14 2024-11-9 Show GitHub Exploit DB Packet Storm
165 9.8 緊急
Network
CE21, LLC CE21 Suite CE21, LLC の WordPress 用 CE21 Suite における重要な機能に対する認証の欠如に関する脆弱性 CWE-288
CWE-306
CVE-2024-10284 2025-01-30 11:14 2024-11-9 Show GitHub Exploit DB Packet Storm
166 7.3 重要
Network
WordPress Download Manager download manager wpdownloadmanager の WordPress 用 download manager におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2024-11740 2025-01-30 11:14 2024-12-19 Show GitHub Exploit DB Packet Storm
167 6.5 警告
Network
bdthemes element pack bdthemes の WordPress 用 element pack におけるパストラバーサルの脆弱性 CWE-22
CWE-22
CWE-502
CVE-2024-33568 2025-01-30 11:14 2024-06-4 Show GitHub Exploit DB Packet Storm
168 5.5 警告
Local
xpdfreader project xpdf Glyph & Cog, LLC の Xpdf における境界外書き込みに関する脆弱性 CWE-787
CWE-787
CVE-2024-4141 2025-01-30 11:14 2024-04-24 Show GitHub Exploit DB Packet Storm
169 6.5 警告
Network
bdthemes element pack bdthemes の WordPress 用 element pack における信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
CWE-98
CVE-2024-4359 2025-01-30 11:14 2024-08-12 Show GitHub Exploit DB Packet Storm
170 5.4 警告
Network
POSIMYTH The Plus Addons for Elementor Page Builder POSIMYTH の WordPress 用 The Plus Addons for Elementor Page Builder におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-4485 2025-01-30 11:14 2024-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 14, 2025, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273811 - netwin cwmail Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter. NVD-CWE-Other
CVE-2002-0273 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273812 - university_of_cambridge exim Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and other command line arguments. NVD-CWE-Other
CVE-2002-0274 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273813 - ettercap ettercap Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets. NVD-CWE-Other
CVE-2002-0276 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273814 - add2it mailman_free Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter. NVD-CWE-Other
CVE-2002-0277 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273815 - add2it mailman_free Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter. NVD-CWE-Other
CVE-2002-0278 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273816 - codeblue codeblue Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply. NVD-CWE-Other
CVE-2002-0280 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273817 - microsoft windows_xp Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data. NVD-CWE-Other
CVE-2002-0283 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273818 - nullsoft winamp Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow … NVD-CWE-Other
CVE-2002-0284 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273819 - microsoft outlook_express Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow remote attackers to b… NVD-CWE-Other
CVE-2002-0285 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm
273820 - powie pforum pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP … NVD-CWE-Other
CVE-2002-0287 2016-10-18 11:18 2002-05-31 Show GitHub Exploit DB Packet Storm