Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
186911 4 警告 ThinkShout - Drupal 用 Mandrill モジュールにおけるパスワードのリセットリンクを取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5544 2012-12-5 16:57 2012-10-9 Show GitHub Exploit DB Packet Storm
186912 4.3 警告 Phase2 Technology - Drupal 用 Feeds モジュールにおける任意のノードを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5543 2012-12-5 16:56 2012-10-10 Show GitHub Exploit DB Packet Storm
186913 6.8 警告 Pedro Cambra - Drupal 用 Commerce Extra Panes モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5542 2012-12-5 16:55 2012-10-3 Show GitHub Exploit DB Packet Storm
186914 4.3 警告 Twitter Pull Project - Drupal用 Twitter Pull モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5541 2012-12-5 16:54 2012-10-3 Show GitHub Exploit DB Packet Storm
186915 4.3 警告 Tekritisoftware - Drupal 用 Hostip モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5540 2012-12-5 16:54 2012-10-3 Show GitHub Exploit DB Packet Storm
186916 3.5 注意 Moshe Weitzman - Drupal 用 Organic Groups モジュールにおける任意のグループに投稿される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5539 2012-12-5 16:51 2012-09-26 Show GitHub Exploit DB Packet Storm
186917 2.1 注意 Nathan Haug - Drupal 用 FileField Sources モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5538 2012-12-5 16:48 2012-09-19 Show GitHub Exploit DB Packet Storm
186918 6 警告 Simplenews Scheduler Project - Drupal 用 Simplenews Scheduler モジュールにおける任意の PHP コード を挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-5537 2012-12-5 16:44 2012-09-19 Show GitHub Exploit DB Packet Storm
186919 5 警告 Erik Webb - Drupal 用 Password policy モジュールにおけるパスワードハッシュを取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5552 2012-12-5 16:21 2012-10-31 Show GitHub Exploit DB Packet Storm
186920 4.3 警告 ThinkShout - Drupal 用 MailChimp モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5551 2012-12-5 16:17 2012-10-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311 - - - vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an acc… New - CVE-2025-27105 2025-02-23 01:15 2025-02-22 Show GitHub Exploit DB Packet Storm
312 - - - vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce mult… New - CVE-2025-27104 2025-02-23 01:15 2025-02-22 Show GitHub Exploit DB Packet Storm
313 - - - vyper is a Pythonic Smart Contract Language for the EVM. Vyper `sqrt()` builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating f… New - CVE-2025-26622 2025-02-23 01:15 2025-02-22 Show GitHub Exploit DB Packet Storm
314 - - - A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute arbitrary code upon booting those devices. This vulnerability allows arbitrary … New - CVE-2019-8900 2025-02-23 01:15 2025-02-22 Show GitHub Exploit DB Packet Storm
315 - - - Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. New - CVE-2024-47896 2025-02-23 00:15 2025-02-23 Show GitHub Exploit DB Packet Storm
316 - - - Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. New - CVE-2024-12577 2025-02-23 00:15 2025-02-23 Show GitHub Exploit DB Packet Storm
317 7.2 HIGH
Network 		- - The SMTP for Amazon SES – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping.… CWE-79
Cross-site Scripting 		CVE-2025-0957 2025-02-22 23:15 2025-02-22 Show GitHub Exploit DB Packet Storm
318 4.3 MEDIUM
Network 		- - A vulnerability, which was classified as problematic, was found in OFCMS 1.1.3. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the att… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2025-1557 2025-02-22 22:15 2025-02-22 Show GitHub Exploit DB Packet Storm
319 4.7 MEDIUM
Network 		- - A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some unknown processing of the file /system of the component Template Management. Th… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2025-1556 2025-02-22 22:15 2025-02-22 Show GitHub Exploit DB Packet Storm
320 7.2 HIGH
Network 		- - The SMTP for Sendinblue – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping.… CWE-79
Cross-site Scripting 		CVE-2025-0953 2025-02-22 22:15 2025-02-22 Show GitHub Exploit DB Packet Storm