Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
186901 4.3 警告 Jason Flatt - Drupal 用 Basic webmail モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5569 2012-12-5 17:45 2012-10-10 Show GitHub Exploit DB Packet Storm
186902 2.6 注意 Angry Donuts - Drupal 用 Chaos tool suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5559 2012-12-5 17:44 2012-11-14 Show GitHub Exploit DB Packet Storm
186903 3.6 注意 User Read-Only project - Drupal 用 User Read-Only モジュールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5557 2012-12-5 17:43 2012-11-14 Show GitHub Exploit DB Packet Storm
186904 6.8 警告 Klaus Purer - Drupal 用 RESTful Web Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5556 2012-12-5 17:40 2012-11-14 Show GitHub Exploit DB Packet Storm
186905 5 警告 Coleman Watts - Webform CiviCRM Integration モジュールのデフォルト設定における連絡先情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5554 2012-12-5 17:40 2012-11-7 Show GitHub Exploit DB Packet Storm
186906 2.1 注意 Daniel Honrade - Drupal 用 OM Maximenu モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5553 2012-12-5 17:39 2012-11-7 Show GitHub Exploit DB Packet Storm
186907 6.8 警告 Carlos Carvalhar - Drupal 用 Time Spent モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5549 2012-12-5 17:33 2012-10-24 Show GitHub Exploit DB Packet Storm
186908 4.3 警告 Carlos Carvalhar - Drupal 用 Time Spent モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5548 2012-12-5 17:28 2012-10-24 Show GitHub Exploit DB Packet Storm
186909 6.8 警告 Thomas Seidl - Drupal 用 Search API モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5547 2012-12-5 17:28 2012-10-17 Show GitHub Exploit DB Packet Storm
186910 2.1 注意 Rob Loach - Drupal 用 ShareThis モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5545 2012-12-5 17:26 2012-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 22, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 6.4 MEDIUM
Network 		- - The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all v… New CWE-79
Cross-site Scripting 		CVE-2024-13461 2025-02-21 19:15 2025-02-21 Show GitHub Exploit DB Packet Storm
72 8.8 HIGH
Network 		- - The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.4 via s… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2024-13353 2025-02-21 19:15 2025-02-21 Show GitHub Exploit DB Packet Storm
73 6.4 MEDIUM
Network 		- - The Ziggeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ziggeo_event' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization… New CWE-79
Cross-site Scripting 		CVE-2024-12452 2025-02-21 19:15 2025-02-21 Show GitHub Exploit DB Packet Storm
74 5.3 MEDIUM
Network 		- - The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in al… New CWE-89
SQL Injection 		CVE-2024-12276 2025-02-21 19:15 2025-02-21 Show GitHub Exploit DB Packet Storm
75 6.4 MEDIUM
Network 		- - The Events Calendar Made Simple – Pie Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's piecal shortcode in all versions up to, and including, 1.2.5 due to i… New CWE-79
Cross-site Scripting 		CVE-2025-1410 2025-02-21 18:15 2025-02-21 Show GitHub Exploit DB Packet Storm
76 - - - In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by sp… New - CVE-2025-0728 2025-02-21 18:15 2025-02-21 Show GitHub Exploit DB Packet Storm
77 - - - In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by sp… New - CVE-2025-0727 2025-02-21 18:15 2025-02-21 Show GitHub Exploit DB Packet Storm
78 - - - In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a fi… New - CVE-2025-0726 2025-02-21 17:15 2025-02-21 Show GitHub Exploit DB Packet Storm
79 - - - The Ajax Search Lite WordPress plugin before 4.12.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting att… New - CVE-2024-13585 2025-02-21 15:15 2025-02-21 Show GitHub Exploit DB Packet Storm
80 - - - The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored C… New - CVE-2024-13314 2025-02-21 15:15 2025-02-21 Show GitHub Exploit DB Packet Storm