Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
186861 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5275 2012-12-7 16:03 2012-11-6 Show GitHub Exploit DB Packet Storm
186862 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5274 2012-12-7 16:01 2012-11-6 Show GitHub Exploit DB Packet Storm
186863 4.9 警告 シトリックス・システムズ - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3433 2012-12-7 15:56 2012-08-9 Show GitHub Exploit DB Packet Storm
186864 6 警告 Lars Hjemli - cgit の syntax-highlighting.sh における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2012-4548 2012-12-7 15:52 2012-10-28 Show GitHub Exploit DB Packet Storm
186865 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5368 2012-12-7 15:42 2012-10-12 Show GitHub Exploit DB Packet Storm
186866 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5339 2012-12-7 15:41 2012-10-12 Show GitHub Exploit DB Packet Storm
186867 6.8 警告 レッドハット - IcedTea-Web の IcedTeaScriptablePluginObject.cc における重要な情報を取得される脆弱性 CWE-189
数値処理の問題 		CVE-2012-4540 2012-12-7 15:40 2012-11-7 Show GitHub Exploit DB Packet Storm
186868 5.6 警告 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3498 2012-12-7 15:38 2012-09-5 Show GitHub Exploit DB Packet Storm
186869 6.1 警告 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3495 2012-12-7 15:37 2012-09-5 Show GitHub Exploit DB Packet Storm
186870 4.7 警告 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2012-3496 2012-12-7 15:34 2012-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 2.4 LOW
Network 		- - A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/user.php. The manipulation of the argumen… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1579 2025-02-23 18:15 2025-02-23 Show GitHub Exploit DB Packet Storm
12 6.3 MEDIUM
Network 		- - A vulnerability, which was classified as critical, was found in PHPGurukul Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument pr… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1578 2025-02-23 17:15 2025-02-23 Show GitHub Exploit DB Packet Storm
13 3.5 LOW
Network 		- - A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /prostatus.php. The manip… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2025-1577 2025-02-23 16:15 2025-02-23 Show GitHub Exploit DB Packet Storm
14 6.1 MEDIUM
Network 		- - The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the rf parameter in all versions up to, and including, 1.4.4 due to insufficient inp… New CWE-79
Cross-site Scripting 		CVE-2024-13728 2025-02-23 15:15 2025-02-23 Show GitHub Exploit DB Packet Storm
15 6.3 MEDIUM
Network 		- - A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax_state.php. T… New CWE-89
CWE-74
SQL Injection
Injection 		CVE-2025-1576 2025-02-23 14:15 2025-02-23 Show GitHub Exploit DB Packet Storm
16 4.3 MEDIUM
Network 		- - A vulnerability classified as problematic has been found in Harpia DiagSystem 12. Affected is an unknown function of the file /diagsystem/PACS/atualatendimento_jpeg.php. The manipulation of the argum… New CWE-99
Resource Injection 		CVE-2025-1575 2025-02-23 13:15 2025-02-23 Show GitHub Exploit DB Packet Storm
17 7.2 HIGH
Network 		- - The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all vers… New - CVE-2024-13869 2025-02-23 13:15 2025-02-22 Show GitHub Exploit DB Packet Storm
18 - - - Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malici… New - CVE-2022-28339 2025-02-23 06:15 2025-02-23 Show GitHub Exploit DB Packet Storm
19 - - - Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo allows Privilege Escalation. This issue affects A1POST.BG Shipping for Woo: from n/a through 1.5.1. New CWE-352
 Origin Validation Error 		CVE-2025-27012 2025-02-23 01:15 2025-02-23 Show GitHub Exploit DB Packet Storm
20 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WarfarePlugins Social Warfare allows DOM-Based XSS. This issue affects Social Warfare: from n/a t… New CWE-79
Cross-site Scripting 		CVE-2025-26973 2025-02-23 01:15 2025-02-23 Show GitHub Exploit DB Packet Storm